CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.
Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.
H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header.
A Credentials Management issue was discovered in Moxa NPort W2150A and NPort W2250A versions prior to 1.11. The default password is empty, allowing unauthorized users to access the device without a password.
Samsung Internet Browser version 5.4.02.3 allows remote attackers to bypass the Same Origin Policy, enabling them to obtain sensitive information via crafted JavaScript code.
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software versions 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to commands being executed with different privilege levels than expected.
In F5 BIG-IP software versions 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, and 11.5.0 - 11.5.4, the Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, allowing remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system.
In F5 BIG-IP software version 13.0.0, undisclosed requests made to BIG-IP virtual servers using the 'HTTP/2 profile' may lead to disruption of service to TMM.
On BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600, i10800, and VIPRION 4450 devices running versions 11.5.0 to 12.1.2, an undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles may cause disruption of data plane services.
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe software versions 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings.
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe software version 13.0.0, a slow memory leak due to undisclosed IPv4 or IPv6 packets sent to the BIG-IP management port or self IP addresses may lead to out of memory (OOM) conditions.
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software versions 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service.
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software versions 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 to 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners (primary and/or secondary IP) may cause TMM to restart.
In F5 BIG-IP APM software versions 13.0.0 and 12.1.2, under certain circumstances, tunneled VPN flows can lead to a VPN/PPP connflow being prematurely freed or cause TMM to stop responding with a 'flow not in use' assertion.
In F5 BIG-IP APM software versions 11.5.0 to 12.1.2, there is an issue where BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources.
A buffer overflow vulnerability in the password function in QNAP QTS versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier could allow remote attackers to execute arbitrary code on NAS devices.
CVE-2017-17032 describes a buffer overflow vulnerability in the password function in QNAP QTS, which could allow remote attackers to execute arbitrary code on NAS devices.
CVE-2017-17031 describes a buffer overflow vulnerability in the password function in QNAP QTS, which could allow remote attackers to execute arbitrary code on NAS devices.
A buffer overflow vulnerability in the login function in QNAP QTS affects versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier. This could allow remote attackers to execute arbitrary code on NAS devices.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS