CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.24)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to heap corruption.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. The issue is related to a user mode write AV in the DllGetClassObject function.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a 'User Mode Write AV'.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. The issue is related to a Read Access Violation on Control Flow.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
XnView Classic for Windows version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation starting at jbig2dec+0x0000000000005643.'
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to possible stack corruption.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. The issue relates to how data from the faulting address controls the subsequent write address.
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a user mode write AV at jbig2dec.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.

