CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Cybozu Garoon versions 3.x through 3.7.5 and 4.x through 4.0.3 mishandle authentication requests, allowing remote authenticated users to conduct LDAP injection attacks. This can lead to bypassing intended login restrictions or obtaining sensitive information by leveraging certain group-administration privileges.
In Android 5.x before version 5.1.1 LMY48T and 6.0 before October 1, 2015, the mediaserver component allows attackers to gain privileges via a crafted application.
libstagefright in Android 5.x before 5.1.1 LMY48T has a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, allowing local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section.
The Secure Element Evaluation Kit (SEEK or SmartCard API) plugin in Android before version 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, potentially leading to Signature or SignatureOrSystem access.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
The vulnerability in libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
The vulnerability in libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
The vulnerability in libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
The vulnerability in mediaserver in Android before version 5.1.1 LMY48T allows attackers to gain privileges via a crafted application.
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application.
Skia, as used in Android before version 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libutils in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file.
The Sonivox components in Android before version 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
The libstagefright library in Android before version 5.1.1 LMY48T has a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.