CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Rockwell Automation Connected Components Workbench (CCW) versions before 7.00.00 are vulnerable to remote attacks that can lead to application crashes or potentially execute arbitrary code via an invalid property value to an ActiveX control built with an outdated compiler.
The MAGMI (Magento Mass Importer) plugin version 0.7.17a and earlier contains an unrestricted file upload vulnerability. This allows remote authenticated users to execute arbitrary code by uploading a ZIP file that contains a PHP file.
SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the project_id parameter.
The Huawei Mobile Partner for Windows 23.009.05.03.1014 has an untrusted search path vulnerability that allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory.
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, allowing remote attackers to access the network resources of arbitrary gears via unspecified vectors.
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.
Adobe Flash Player and Adobe AIR versions before 13.0.0.252, 15.0.0.223, and 15.0.0.356 have a vulnerability that allows attackers to transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK before version 15.0.0.356, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK before version 15.0.0.356, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.252 and in versions 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and in Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
A heap-based buffer overflow in Adobe Flash Player before version 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux, as well as in Adobe AIR before 15.0.0.356, allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.252 and in versions 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux. It also affects Adobe AIR before version 15.0.0.356 and Adobe AIR SDK and Compiler before version 15.0.0.356, allowing attackers to execute arbitrary code.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK before version 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
A heap-based buffer overflow in Adobe Flash Player allows attackers to elevate their integrity level from Low to Medium. This affects versions before 13.0.0.252 on Windows and OS X, and before 11.2.202.418 on Linux.
A heap-based buffer overflow vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.252 for Flash Player and before 15.0.0.356 for Adobe AIR.
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects various software versions on Windows, OS X, and Linux.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and Adobe AIR versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.