CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free vulnerability in kernel-mode drivers in Microsoft Windows allows local users to gain elevated privileges via a crafted application.
Microsoft Internet Explorer versions 6 through 9 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
The SoapClient::__call method in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, allowing remote attackers to execute arbitrary code by providing crafted serialized data with an unexpected data type.
The pcntl_exec implementation in PHP before versions 5.4.41, 5.5.25, and 5.6.9 truncates a pathname upon encountering a null byte (\x00), allowing remote attackers to bypass extension restrictions and execute files with unexpected names via a crafted first argument.
A vulnerability in PHP before versions 5.4.41, 5.5.25, and 5.6.9 truncates a pathname upon encountering a null character (\x00) in certain situations. This allows a remote attacker to bypass extension restrictions and access files or directories with unexpected names via a crafted argument to set_include_path, tempnam, rmdir, or readlink. This is an incomplete fix for CVE-2006-7243.
Heap-based buffer overflow caused by integer overflow in the ftp_genlist function in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9. This allows remote FTP servers to execute arbitrary code via a long reply to a LIST command.
Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.
The phar_parse_metadata function in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.
Redis versions before 2.8.21 and 3.x before 3.0.2 allow remote attackers to execute arbitrary Lua bytecode via the eval command.
The Users Ultra plugin before version 1.5.16 for WordPress contains multiple SQL injection vulnerabilities in the ratings module. Remote attackers can execute arbitrary SQL commands via the data_target or data_vote parameters in the rating_vote action.
Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before version 7.2.6727 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the defaultlanguage parameter.
The mod_auth module in lighttpd before version 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string that does not contain a colon character.
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, allowing local users to gain privileges by connecting to the server.
Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, allowing remote attackers to obtain sensitive information, modify passwords, or remove accounts by leveraging the guest role.
Buffalo routers WHR-1166DHP, WSR-600DHP, WHR-600D, WHR-300HP2, WMR-300, WEX-300, and BHR-4GRV2 in versions 1.60 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.
Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, allowing remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request.
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before version 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
SysAid Help Desk versions before 15.2 are vulnerable to an XML Entity Expansion (XEE) attack, allowing remote attackers to cause denial of service through a large number of nested entity references in an XML document.
Multiple directory traversal vulnerabilities in SysAid Help Desk before version 15.2 allow remote attackers to read arbitrary files and cause denial of service.
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, allowing remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.