CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.24)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.
LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.
The upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file.
SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php. This issue was identified until September 12, 2017.
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. The issue exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver, where user-supplied data is not properly validated, potentially leading to a kernel pool overflow.
The native Bluetooth stack in the Linux Kernel (BlueZ), from version 2.6.32 to 4.13.1, is vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses, resulting in Remote code execution in kernel space.
In MISP versions before 2.4.80, when configured with X.509 certificate authentication alongside a non-MISP external user management API, an unauthenticated user can gain access as an arbitrary user if the API returns an empty value.
A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to ensure page table entries remain in sync with other accounting done.
A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node for allocations, but it does not properly handle the case where `node >= MAX_NUMNODES`, leading to out-of-bounds access to an internal array.
In Apple iOS 7 through 9, there is a vulnerability related to the LEAP protocol that allows a large audio command to be sent to a targeted device, leading to a heap overflow with attacker-controlled data. This vulnerability enables full control over the device due to the high privileges of the Bluetooth stack in iOS.
CAPTCHA bypass vulnerability in MantisBT before version 1.2.19.
On Beijing Hanbang Hanbanggaoke devices, due to insufficient sanitization of user-controlled input, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next during 'readelf -a' execution.
Version 3.4.4 of Tcpreplay has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file.
The Photocrati NextGEN Gallery plugin version 2.1.10 for WordPress allows unrestricted file upload via the 'name' parameter if the file extension is changed from .jpg to .php.
Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a non-root account. This allows local users to gain privileges by leveraging access to this non-root account.
CVE-2015-9227 in AlegroCart 1.2.8 has a remote file inclusion vulnerability in the get_file function, allowing remote administrators to execute arbitrary PHP code via a URL in the file_path parameter.
Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators and authenticated users to execute arbitrary SQL commands through specific parameters in download and order update functions.
The Gwolle Guestbook plugin before version 1.5.4 for WordPress has a PHP remote file inclusion vulnerability when allow_url_include is enabled. This allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php.
Ellucian Banner Student versions 8.5.1.2 through 8.7 allow remote attackers to reset arbitrary passwords via unspecified vectors, referred to as 'Weak Password Reset.'