CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In the Linux kernel before version 4.1.6 on the x86_64 platform, there is a flaw in entry_64.S that improperly relies on espfix64 during nested NMI processing. This allows local users to gain privileges by triggering an NMI within a certain instruction window.
A cross-site request forgery (CSRF) vulnerability exists in Siemens SIMATIC S7-1200 CPU devices with firmware prior to version 4.1.3. This allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before version 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code.
The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
A use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code. The issue arises from improper interaction between resize events and changes to CSS token sequences for a CANVAS element.
Cisco IOS XE before version 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, allowing remote attackers to cause a denial of service (Embedded Services Processor crash) via crafted IP packets.
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv4 UDP packet.
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service via a crafted L2TP packet, leading to an Embedded Services Processor crash.
A stack-based buffer overflow in GSM SIM Utility (also known as SIM Card Editor) version 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file.
Buffer overflow in CHICKEN versions 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the 'substring-index[-ci] procedures.'
The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before version 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data, cause a denial of service, or execute arbitrary code via unspecified vectors.
HP Virtual Connect Enterprise Manager (VCEM) SDK before version 7.5.0, as used in HP Matrix Operating Environment before version 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Matrix Operating Environment before version 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Matrix Operating Environment before version 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment and other products, allows local users to gain privileges, which may lead to obtaining sensitive information, modifying data, or causing a denial of service.
Buffer overflow in HP Version Control Repository Manager (VCRM) before version 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.