CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A stack-based buffer overflow exists in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier. Remote attackers can execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.
Multiple SQL injection vulnerabilities in Milw0rm Clone Script 1.0 in admin/login.php allow remote attackers to execute arbitrary SQL commands via the (1) usr or (2) pwd parameter.
SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.
SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before version 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graph_template_id parameter to graph_templates.php.
SQL injection vulnerability in Cacti before version 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience (VXC) Client 6215 devices with firmware 11.2(27.4) allows local users to gain privileges for OS command execution via a crafted option value.
Cisco UCS Central Software version 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter.
EMC Unified Infrastructure Manager/Provisioning (UIM/P) version 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name.
The vulnerability in the Frontend User Upload (feupload) extension version 0.5.0 and earlier for TYPO3 allows remote attackers to upload files with executable extensions, leading to arbitrary code execution.
CVE-2015-4606 describes an unrestricted file upload vulnerability in the Job Fair extension for TYPO3 before version 1.0.1. An attacker can upload a file with an executable extension, allowing remote code execution.
libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to 'free' function calls in the lexer's memory clean-up procedure.
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
N-Tron 702-W Industrial Wireless Access Point devices use the same SSH and HTTPS private keys across different customers' installations, making it easier for remote attackers to defeat cryptographic protection mechanisms.
CGI RESCUE BloBee version 1.20 and earlier allows remote attackers to write to arbitrary files, potentially leading to arbitrary code execution.
SQL injection vulnerability in Igreks MilkyStep Light version 0.94 and earlier and Professional version 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Igreks MilkyStep Light version 0.94 and earlier and Professional version 1.82 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.
VMware Workstation, Player, and Fusion prior to specified versions have a vulnerability that allows attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command.
The X509_cmp_time function in OpenSSL before versions 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service via a crafted length field in ASN1_TIME data, leading to out-of-bounds read and application crash.
The dtls1_clear_queues function in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message. This allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.
Cisco TelePresence Video Communication Server (VCS) version X8.5RC4 is vulnerable to a denial of service attack that can lead to high CPU consumption or device outage. An attacker can exploit a crafted SDP parameter-negotiation request in an SDP session during a SIP connection.