CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document.
The kernel in Apple iOS before version 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
libpthread in the kernel in Apple iOS before 9 has a vulnerability that allows local users to gain privileges or cause a denial of service via unspecified vectors.
The kernel in Apple iOS before version 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Multiple unspecified vulnerabilities in SQLite before version 3.8.10.2, as used in Apple iOS before version 9, may lead to unknown impact and attack vectors.
The processor_set_tasks API implementation in Apple iOS before version 9 allows local users to bypass an entitlement protection mechanism and gain access to the task ports of arbitrary processes by leveraging root privileges.
A vulnerability in dyld in Apple iOS Dev Tools before version 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
IOHIDFamily in Apple iOS before version 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
The Disk Images component in Apple iOS before version 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
The CP Reservation Calendar plugin for WordPress before version 1.1.7 contains multiple SQL injection vulnerabilities in the dex_reservations.php file. Remote attackers can execute arbitrary SQL commands via the id or dex_item parameters in the respective actions.
Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the Command Line Interface (CLI) and the Web User Interface (UI).
The Farol web application has an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the email parameter in tkmonitor/estrutura/login/Login.actions.php.
The Silicon Integrated Systems display driver for Windows XP (also known as VGA Driver Manager) version 6.14.10.3930 allows local users to gain privileges via crafted IOCTL calls 0x96002400 or 0x96002404.