CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The failover IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software before version 9.1(6), 9.2(3.3), and 9.3(3) does not properly validate failover communication messages, allowing remote attackers to reconfigure an ASA device.
Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks. This allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects.
The virtualization layer in Cisco ASA FirePOWER Software before version 5.3.1.2 and 5.4.x before version 5.4.0.1, as well as ASA Context-Aware (CX) Software before version 9.3.2.1-9, is vulnerable to denial of service attacks. Remote attackers can cause device reloads by rapidly sending crafted packets to the management interface.
An unspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to modify skateboard movement, potentially leading to human injury or physical damage via an 'injection attack' that blocks and hijacks a Bluetooth signal.
Juniper Junos versions before 12.1X44-D45, 12.1X46-D30, 12.1X47-D20, 12.3R9, 12.3X48-D10, 13.2R6, 13.3R5, 14.1R3, and 14.2R1 allow local users to gain privileges via crafted combinations of CLI commands and arguments.
A stack-based buffer overflow in asn1_der_decoding in libtasn1 before version 4.4 allows remote attackers to have unspecified impact.
In the Red Hat openstack-puppet-modules package before version 2014.2.13-2, puppet manifests use a default password of CHANGEME for the pcsd daemon. This allows remote attackers to execute arbitrary shell commands via unspecified vectors.
Integer overflow in the Swift simulator in Apple Xcode before version 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion.
Buffer overflow in the UniformTypeIdentifiers component in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted Uniform Type Identifier.
LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a 'type confusion' issue.
Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
The NVIDIA graphics driver in Apple OS X before 10.10.3 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via an unspecified IOService userclient type.
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors. This is a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135.
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
Implementacja XPC w frameworku Admin w systemie Apple OS X przed wersją 10.10.3 pozwala lokalnym użytkownikom na ominięcie uwierzytelniania i uzyskanie uprawnień administratora za pomocą nieokreślonych wektorów.
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages. This allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet.
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows man-in-the-middle attackers to cause a denial of service via unspecified vectors.