CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, allowing physically proximate users to gain access via an arbitrary username in the Emergency Login screen.
The HIPAA configuration interface in GE Healthcare Optima MR360 has weak passwords for user accounts, which may lead to unauthorized access.
GE Healthcare Optima CT680, CT540, CT640, and CT520 have a default password of #bigguy for the root user, which poses potential security risks.
The Xeleris System of GE Healthcare Discovery 530C has a password of #bigguy1 for the acqservice and wsservice users. It is unclear whether this password is default, hardcoded, or dependent on another system or product requiring a fixed value.
GE Healthcare Centricity DMS versions 4.2, 4.1, and 4.0 have a password of Muse!Admin for the Museadmin user, which may lead to unspecified impacts and attack vectors.
GE Healthcare Infinia II has default passwords for various users, creating a risk of unauthorized access. These passwords are: 'infinia' for the infinia user, '#bigguy1' for acqservice, 'dont4get2' for the Administrator, '#bigguy1' for the emergency user, and '2Bfamous' for the InfiniaAdmin.
GE Healthcare Centricity Image Vault 3.x has weak passwords for administrator accounts, including 'gemnet' for the administrator account and 'webadmin' for the webadmin account. Additionally, the gemsservice account has an empty password, posing a serious security risk.
GE Healthcare Discovery VH has a default password for the ftpclient user of the Interfile server and for the LOCAL user of the FTP server for the Codonics printer, creating a risk of unauthorized access.
GE Healthcare Millennium MG, NC, and MyoSIGHT have a password of 'insite.genieacq' for the insite account that cannot be changed without disabling product functionality for remote InSite support.
GE Healthcare Millennium MG, NC, and MyoSIGHT have default passwords for users, creating a risk of unauthorized access. These passwords include 'root.genie' for the root user, 'service.' for the service user, 'admin.genie' for the admin user, 'reboot' for the reboot user, and 'shutdown' for the shutdown user.
GE Healthcare eNTEGRA P&R has multiple user accounts with easily guessable passwords, creating a risk of unauthorized access. Passwords such as 'entegra', 'passme', and '0' may be default or hardcoded, further increasing the threat.
The firmware in MNS before version 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account. This may allow physically proximate attackers to gain access by establishing a console session on a nonstandard installation where this account is enabled.
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
IBM MQ Light before version 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data.
IBM MQ Light before version 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data.
IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data.