CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. The CGI scripts in the administrative interface are affected, allowing an attacker to execute commands if a logged-in user visits a malicious website.
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before version 7.0.1-build2093. An attacker can exploit the bauth cookie to access cgi-bin/MANGA/admin.cgi, allowing for enumeration of user accounts.
Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug prevents transitioning into the specified user in a run_as request, leading to incorrect behavior.
A stack-based buffer overflow in dnstracer through version 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument mishandled in a strcpy call for argv[0].
Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.
The Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the DatabaseName::read function in lib/StarWriterStruct.cxx.
Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c.
In Apache Hadoop versions 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.
A directory traversal vulnerability exists in BigTree CMS through version 4.2.18 on Windows, allowing attackers to read arbitrary files via ..\ sequences in the directory parameter.
SQL injection vulnerability in BigTree CMS version 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via form-create.php. An attacker can create a crafted table name, exposing the vulnerability in the admin dashboard.
Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the 'Broadpwn' issue.
In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate.
In Lenovo Service Bridge versions before 4.0, an insecure HTTP connection is used to send system serial number, machine type and model, and product name to Lenovo's servers.
CVE-2016-8229 is a cross-site request forgery vulnerability in Lenovo Service Bridge before version 4. An attacker with access to the DHCP server used by the system where LSB is installed could exploit this vulnerability.
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges.
OpenEMR version 5.0.0 and prior allows low-privilege users to upload files of dangerous types, which can lead to arbitrary code execution within the context of the vulnerable application.
Multiple CSRF issues exist in BigTree CMS through version 4.2.18, related to the clear parameter in core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameters in core\admin\modules\dashboard\vitals-statistics\404\create-301.php.
PJSIP, used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, allows remote attackers to cause a denial of service (buffer overflow and application crash) via a SIP packet with a crafted CSeq header in conjunction with a Via header that lacks a branch parameter.
CSRF exists in BigTree CMS through version 4.2.18, allowing a page to be unlocked using the force parameter in a request to /admin/pages/revisions.php.
BigTree CMS version 4.2.18 has an unrestricted file upload vulnerability. An attacker can upload an 'xxx.pht' or 'xxx.phtml' file, allowing them to bypass safety checks and execute arbitrary code.