CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system.
A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account.
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in the TrueType Font (TTF) parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in the JPEG2000 parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in the JPEG2000 parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in the TrueType Font (TTF) parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in the JPEG2000 parser in TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation.
VMware Unified Access Gateway and Horizon View contain a heap buffer-overflow vulnerability that may allow a remote attacker to execute code on the security gateway.
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion.
Net Monitor for Employees Pro up to version 5.3.4 has an unquoted service path, allowing a Security Feature Bypass of its application blocking design goal. A local attacker with the right privileges can execute the blocked application program.exe.
SQL injection vulnerability in ZCMS 1.1 allows attackers to manipulate database queries.
Binaries compiled against targets using the libssp library in GCC for stack smashing protection may allow local users to perform buffer overflow attacks due to the lack of the Object Size Checking feature.
CVE-2015-8235 is a directory traversal vulnerability in Spiffy before version 5.4.
The chroot, jail, and zone connection plugins in Ansible before version 1.9.2 allow local users to escape a restricted environment via a symlink attack.
Race conditions exist in opa-fm before version 10.4.0.0.196 and opa-ff before version 10.4.0.0.197.
Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.
CVE-2017-9355 is an XXE vulnerability in the import playlist feature in Subsonic 6.1.1 that may allow remote attackers to conduct SSRF attacks via a crafted XSPF playlist file.
CVE-2017-7966 is a DLL Hijacking vulnerability in Schneider Electric's SoMachine HVAC v2.1.0 that allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to improper loading of a DLL.
A buffer overflow vulnerability exists in the AlTracePrint.exe executable in Schneider Electric's SoMachine HVAC v2.1.0.