CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The MFC-J960DWN firmware version D and earlier has a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVE-2017-2238 describes a CSRF vulnerability in the firmware of Toshiba Home gateway HEM-GW16A and HEM-GW26A, allowing remote attackers to hijack administrator authentication.
Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware versions HEM-GW16A-FW-V1.2.0 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.
The Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware contains hard-coded credentials, which may allow attackers to perform operations on the device with administrative privileges.
Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware versions V1.2.0 and earlier allow an attacker to bypass access restrictions to change the administrator account password.
The firmware of Toshiba Home gateway HEM-GW16A and HEM-GW26A in versions V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen, enabling operations with administrative privileges.
A vulnerability in the installer of the PDF Digital Signature Plugin (G2.30 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The vulnerability in the installer of Shinseiyo Sogo Soft (4.8A and earlier) related to an untrusted search path allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2231 describes an untrusted search path vulnerability in the installer of the MLIT DenshiSeikabutsuSakuseiShienKensa system version 3.02 and earlier, distributed until June 20, 2017. An attacker can gain privileges via a Trojan horse DLL placed in an unspecified directory.
CVE-2017-2230 describes an untrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 and earlier, allowing remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
The Douroshisetu Kihon Data Sakusei System version 1.0.2 and earlier has an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2227 describes an untrusted search path vulnerability in the installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2226 describes an untrusted search path vulnerability in the setup file of e-Tax software (WEB version) (1.17.1) and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The vulnerability in EbidSettingChecker.exe (version 1.0.0.0) related to an untrusted search path allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The CSRF vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
The vulnerability in the CASL II simulator installer related to an untrusted search path allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
The vulnerability in the Installer of QuickTime for Windows related to an untrusted search path allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2215 describes an untrusted search path vulnerability in the installer of 'jizen_setup.exe', allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2208 describes an untrusted search path vulnerability in the installer of the electronic tendering and bid opening system, allowing an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
CVE-2017-2188 involves an untrusted search path vulnerability in the installer of the Denshinouhin Check System, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.