CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Integer overflow in the opj_t2_read_packet_data function in the OpenJPEG library in PDFium, used in Google Chrome before version 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long segment in a JPEG image.
A use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in PDFium, used in Google Chrome before version 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.
Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted RFC or SOAP-RFC request.
Podatność w Kerberos Key Distribution Center (KDC) w systemach Microsoft Windows umożliwia zdalnie uwierzytelnionym użytkownikom domeny uzyskanie uprawnień administratora domeny poprzez sfałszowany podpis w bilecie. Wykorzystano ją w praktyce w listopadzie 2014 roku.
The XmlImportExport plugin in MantisBT version 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e modifier.
The kernel in iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, allowing attackers to execute arbitrary code in a privileged context via a crafted application.
The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the debugserver sandbox, allowing attackers to bypass intended binary-execution restrictions via a crafted application run during a time when debugging is not enabled.
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, making it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
Multiple SQL injection vulnerabilities in PHP-Fusion version 7.02.07 allow remote authenticated users to execute arbitrary SQL commands. These attacks can be conducted via the submit_id parameter in submissions.php and the status parameter in members.php.
The fetch_url function in tnftp in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.
Multiple unspecified vulnerabilities in Check Point Security Gateway versions R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10 may lead to stability issues when certain modules are enabled.
Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled. It allows remote attackers to cause a denial of service (fwk0 process crash, core dump, and restart) via a redirect to the UserCheck page.
Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, related to the use of URL Filtering or Identity Awareness blade, allows remote attackers to cause a denial of service (crash) via vectors involving an HTTPS request.
Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the xf_Pointer_New or xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.
The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, allowing local users to read the file.
Integer overflow in the getword function in pppd in Paul's PPP Package before version 2.4.7 allows attackers to access privileged options via a long word in an options file, leading to a heap-based buffer overflow.
A vulnerability in Cisco IOS on Aironet access points allows remote attackers to cause a denial of service by sending a malformed EAP packet when 'dot11 aaa authenticator' debugging is enabled.
The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.
The vmware-vga driver in QEMU allows local guest users to write to qemu memory locations, potentially gaining privileges through unspecified parameters related to rectangle handling.
The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0 uses the same security keys across different customers' installations, allowing remote attackers to execute arbitrary code.