CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, allowing remote attackers to cause a denial of service (CPU consumption) via a crafted packet.
The dissect_lbmr_pser function in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet.
The dissect_lbmr_pser function in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject zero-length packets, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet.
Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before version 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey (1) set or (2) get command.
Buffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request.
The XXE vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers via an XML request to tc~sld~wd~main/Main, potentially leading to unspecified other impacts.
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C before version 55.1 uses an integer data type that is inconsistent with a header file. This allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted text.
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C before version 55.1 does not properly track directionally isolated pieces of text. This allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to unspecified PHP scripts.
mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, allowing remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request.
Unspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x before J06.19 allows remote authenticated users to gain privileges by leveraging Expand access.
HP Network Virtualization for LoadRunner and Performance Center versions 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the HttpServlet or NetworkEditorController component.
Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.
The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port.
Unspecified vulnerability in HP SiteScope in versions 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors.
IBM Security SiteProtector System versions before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allow remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors.
Buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.11.1 may lead to unspecified impact and allows remote attacks.
IBM WebSphere Portal version 8.5 through CF05 is vulnerable to remote attacks that can lead to denial of service through excessive CPU consumption.
A stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.11.1 allows remote attackers to execute arbitrary code.
The network drivers in Cisco TelePresence T, TE, and TC before version 7.3.2 are vulnerable to remote attacks that can lead to denial of service by flooding the device with crafted IP packets.