CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain privileges via a crafted CORBA call.
The Linux kernel before version 3.17.5 has an issue with handling faults related to the Stack Segment (SS) segment register, allowing local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.
The vulnerability in EMC Documentum Content Server before version 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by manipulating dm_job and dm_job_request objects.
Directory traversal vulnerability in the CollectorConfInfoServlet servlet in ManageEngine NetFlow Analyzer allows remote attackers to execute arbitrary code via a .. (dot dot) in the filename.
The NativeAppServlet in ManageEngine Desktop Central MSP before version 90075 allows remote attackers to execute arbitrary code via a crafted JSON object.
Docker version 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted image or build in a Dockerfile in an LZMA (.xz) archive.
CVE-2014-9057 describes an SQL injection vulnerability in the XML-RPC interface in Movable Type before version 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6. This allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
An SQL injection vulnerability in phpTrafficA version 2.3 and earlier in Php/Functions/log_function.php allows remote attackers to execute arbitrary SQL commands via a User-Agent HTTP header.
Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
A directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent before version 1.03.30109 allows remote attackers to read arbitrary files via a .. (dot dot) in the GetFile parameter.
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 allows man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable.
A race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file. The issue is that the installation extracts the contents to temporary files before validating the signature.
The default configuration of Zenoss Core before version 5 allows remote attackers to read or modify database information by connecting to unspecified open ports.
The addAccount method in the Settings application in Android before version 5.0.0 does not properly create a PendingIntent, allowing attackers to use the SYSTEM uid to broadcast an intent with arbitrary component, action, or category information via a third-party authenticator in a crafted application.
Multiple SQL injection vulnerabilities in the queryLastApp method in the WAPPushManager module in Android before version 5.0.0 allow remote attackers to execute arbitrary SQL commands. The attack can be carried out via the wapAppId or contentType fields in a PDU for a malformed WAPPush message.
The java.io.ObjectInputStream implementation in Android before version 5.0.0 does not verify that deserialization will result in an object that meets the requirements for serialization. This allows attackers to execute arbitrary code via a crafted finalize method for a serialized object in an ArrayMap Parcel within an intent sent to system_service.
Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, allowing remote attackers to execute arbitrary code by spoofing the callhome server or deploying a crafted web site visited during a login session.
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public read or execute access via a move action.
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer version 0.9.9 and earlier does not check certain malloc return values, allowing remote VNC servers to cause application crashes or potentially execute arbitrary code by specifying a large screen size in FramebufferUpdate, ResizeFrameBuffer, or PalmVNCReSizeFrameBuffer messages.
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before version 3.16.2.4 and 3.17.x before version 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed. This allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding.