CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) allows attackers to gain privileges via a crafted application.
The buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application.
The buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application.
A flaw in Binder in Android mishandles object references, allowing attackers to gain privileges via a crafted application.
Buffer overflow in the Bluetooth module in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before May 1, 2016 allows remote attackers to execute arbitrary code via a long PIN value.
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application.
The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to gain privileges via a crafted application.
The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted application.
In libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before version 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before May 1, 2016, attackers can gain privileges via an application containing a crafted symbol name.
The tethering controller in netd, distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices, improperly validates upstream interface names. This allows attackers to bypass intended access restrictions via a crafted application.
The WLAN driver for Linux kernel 3.x and 4.x does not verify authorization for private SET IOCTL calls, allowing attackers to gain privileges via a crafted application.
CVE-2015-0570 involves a stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN driver for Linux kernel 3.x and 4.x. This allows attackers to gain privileges via a crafted application that uses a long WPS IE element.
CVE-2015-0569 involves a heap-based buffer overflow in the WLAN driver for Linux kernel 3.x and 4.x, allowing attackers to gain privileges via a crafted application that establishes a packet filter.
The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, potentially leading to unauthorized privilege escalation.
The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role.
HPE Network Node Manager i (NNMi) versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allow remote authenticated users to modify data or cause a denial of service via unspecified vectors.
HPE Network Node Manager i (NNMi) versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.