CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in HP Network Node Manager i (NNMi) versions 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors.
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before version 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to ports 4999 or 80.
Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors.
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before version 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors.
In Asterisk Open Source versions 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, as well as Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, there is a vulnerability that allows remote attackers to cause a denial of service (stack consumption) and possibly execute arbitrary code via an HTTP request with a large number of Cookie headers.
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, and F-Secure Email and Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands.
A stack-based buffer overflow in OpenJPEG before version 1.5.2 allows remote attackers to exploit unspecified vectors in the files lib/openjp3d/opj_jp3d_compress.c, bin/jp3d/convert.c, or lib/openjp3d/event.c.
Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact, leading to a heap-based buffer overflow.
Cups-browsed in cups-filters version 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the model or PDL, related to System V interface scripts generated for queues.
EMC Cloud Tiering Appliance (CTA) versions 10 through SP1 allow remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration along with an entity reference, related to an XXE issue.
A stack-based buffer overflow in gen_jumpex.dll in Winamp before version 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name.
A vulnerability in kiwi before version 4.98.05, used in SUSE Studio Onsite 1.2 before version 1.2.1 and SUSE Studio Extension for System z 1.2 before version 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name.
Kiwi before version 4.85.1, used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by 'double quotes in kiwi_oemtitle of .profile.'
A vulnerability in kiwi before version 4.98.08, used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, as well as Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 that allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.