CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long USER command.
In ZOHO ManageEngine OpManager versions 11.6, 11.5, and earlier, remote administrators can bypass SQL query restrictions by adding a comment in the query to api/json/admin/SubmitQuery, as demonstrated by 'INSERT/**/INTO'.
ZOHO ManageEngine OpManager version 11.5 build 11600 and earlier uses a hardcoded password 'plugin' for the IntegrationUser account, allowing remote authenticated users to gain administrator access by leveraging knowledge of this password.
Unspecified vulnerability in International Components for Unicode (ICU) before version 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2.
GasGauge in Apple watchOS before version 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
GasGauge in Apple watchOS before version 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, allowing attackers to cause a denial of service (boot failure) via a crafted app that writes to an unintended address.
The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
The vulnerability in rsh in the remote_cmds component in Apple OS X before version 10.11 allows local users to gain root privileges through manipulation of environment variables.
The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file.
The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, allowing remote attackers to have an unspecified impact via crafted TLS data.
The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, allowing physically proximate attackers to access an unattended workstation.
The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
The Safari Extensions implementation in Apple Safari before version 9 does not require user confirmation before replacing an installed extension, which may lead to unspecified impacts and attack vectors.