CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The ChkCookie subroutine in an ActiveX control in Advantech WebAccess before version 7.2 allows remote attackers to read arbitrary files via a crafted call.
The upAdminPg.asp file in Advantech WebAccess before version 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
Multiple stack-based buffer overflows in Advantech WebAccess before version 7.2 allow remote attackers to execute arbitrary code via long strings in various parameters of ActiveX controls.
The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 allows remote attackers to execute arbitrary code via a crafted HTTP request.
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.
Unspecified vulnerability in Oracle Java SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
An unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of 'admin' for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors.
The Yealink IP Phone SIP-T38G has hardcoded passwords in the config/.htpasswd file for user accounts, making it easier for remote attackers to gain access.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS