CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, and watchOS before 4.2, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
An issue was discovered in certain Apple products affecting iOS before 11.2, Safari before 11.0.2, iCloud before 7.2 on Windows, iTunes before 12.7.2 on Windows, and tvOS before 11.2. The issue involves the 'WebKit' component, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
An issue was discovered in certain Apple products related to the 'Kernel' component. This affects iOS versions before 11.2, macOS versions before 10.13.2, tvOS versions before 11.2, and watchOS versions before 4.2.
An issue was discovered in certain Apple products, including iOS before 11.2, tvOS before 11.2, and watchOS before 4.2, involving the 'IOSurface' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
An issue was discovered in certain Apple products, including macOS before 10.13.2, involving the 'IOKit' component. It allows attackers to execute arbitrary code in a privileged context.
An issue was discovered in certain Apple products related to the 'WebKit' component. Affects iOS before 11.2, Safari before 11.0.2, iCloud before 7.2 on Windows, iTunes before 12.7.2 on Windows, and tvOS before 11.2. This issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'IOKit' component. It allows attackers to execute arbitrary code in a privileged context.
An issue was discovered in certain Apple products, including iOS before 11.2 and macOS before 10.13.2, involving the 'IOKit' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access can send a specially crafted set of packets to Port 403/TCP, causing the service to stall or terminate.
Huawei HG8245H versions earlier than V300R018C00SPC110 have an authentication bypass vulnerability. An attacker can access a specific URL of the affected product, which may lead to information leak.
Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device, potentially causing it to restart.
Some Huawei products, such as RP200, TE30, TE40, TE50, and TE60, have out-of-bounds read vulnerabilities. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices.
Some Huawei products, such as RP200, TE30, TE40, TE50, and TE60, have out-of-bounds read vulnerabilities. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices.
Some Huawei products, such as RP200, TE30, TE40, TE50, and TE60, have out-of-bounds read vulnerabilities due to insufficient input validation. A remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices.
CVE-2017-15317 vulnerability affects various versions of AR120-S, AR1200, AR150, AR160, AR200, AR2200, AR3200, and AR510 routers. It exists in software versions V200R006C10, V200R007C00, V200R008C20, and others.
The GPU driver of Mate 9 and Mate 9 Pro Huawei smartphones before MHA-AL00B 8.0.0.334(C00) and LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker can trick a user into installing a malicious application that triggers double free, leading to system crash or arbitrary code execution.
Huawei SmartCare V200R003C10 has a CSV injection vulnerability. A remote authenticated attacker could inject malicious CSV expression to the affected device.
The baseband modules of Huawei Mate 10, Mate 10 Pro, Mate 9, and Mate 9 Pro have a stack overflow vulnerability due to lack of parameter validation. An attacker could send malicious packets to these devices within radio range, leading to stack overflow when the baseband module handles these packets.
The Huawei iReader app before version 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store malicious files in an arbitrary directory.
The Huawei iReader app before version 8.0.2.301 has an input validation vulnerability that allows an attacker to control app access and load malicious websites.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS