CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service.
MaLion for Windows and Mac versions 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server.
SQL injection vulnerability in MaLion for Windows and Mac versions 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server.
MaLion for Windows 5.2.1 and earlier, and MaLion for Mac 4.0.1 to 5.2.1, only when 'Remote Control' is installed, allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.
The bfd_mach_o_read_symtab_strtab function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap write, potentially leading to code execution via a crafted mach-o file.
The nlm_swap_auxiliary_headers_in function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted nlm file.
The bfd_make_section_with_flags function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause a NULL dereference via a crafted file.
The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils version 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
The evax_bfd_print_emh function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
The _bfd_vms_slurp_egsd function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.
The _bfd_vms_slurp_eeom function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
The bfd_mach_o_i386_canonicalize_one_reloc function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.
The _bfd_xcoff_read_ar_hdr function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds stack read via a crafted COFF image file.
The alpha_vms_object_p function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap write, potentially leading to code execution via a crafted vms alpha file.
The _bfd_vms_save_sized_string function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted vms file.
The bfd_cache_close function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause a heap use after free, potentially leading to code execution via a crafted nested archive file. This issue arises from incorrect function calls during an attempt to release memory.
CVE-2017-10949 affects Dell Storage Manager 2016 R2.1 and involves directory traversal leading to information disclosure. The issue arises when the doGet method of the EmWebsiteServlet class does not properly validate user-provided paths before using them in file operations.
Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory.
In ImageMagick version 7.0.6-1, a memory exhaustion vulnerability was found in the ReadSUNImage function in coders/sun.c, allowing attackers to cause a denial of service.
In ImageMagick version 7.0.6-1, a memory exhaustion vulnerability was found in the ReadMPCImage function in coders/mpc.c, allowing attackers to cause a denial of service.