CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges due to failure to validate software updates.
CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack user authentication for requests to start an update from an arbitrary source via a crafted request.
NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via error messages.
SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
SAP Business One for Android version 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to a specific endpoint.
The vulnerability in Spring Security and Spring Framework involves incorrect recognition of URL paths, which may lead to certain resources not being protected. Differences in pattern matching mechanisms can result in unprotected paths that should be secured.
In Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter in authorization requests was processed as Spring SpEL. This allowed a malicious user to trigger remote code execution by crafting the value of the response_type parameter.
CVE-2016-4435 affects an endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13. It allows unauthenticated clients to read or write blobs and may lead to a denial of service attack on the Director VM.
The password reset flow in UAA in Cloud Foundry and other mentioned versions is vulnerable to brute force attacks due to the ability to have multiple active codes at the same time. This vulnerability only applies when using the UAA internal user store for authentication.
It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.
Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x versions prior to 1.6.17 contain a flaw in managing container files during Docker image preparation. This flaw could be exploited to delete, corrupt, or overwrite host files and directories, including other container filesystems on the host.
Spring Framework versions 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14, and older unsupported versions are vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being downloaded rather than rendered and also includes some input reflected in the response.
In Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier, and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, the change_email form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an email change for a user logged into a Cloud Foundry instance via a malicious link.
CVE-2014-3527 affects CAS proxy ticket authentication in Spring Security versions 3.1 to 3.2.4. A malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated, leading to bypassing access control restrictions.
The Spring Framework versions from 4.0.0 to 4.0.4 and from 3.0.0 to 3.2.8, as well as possibly earlier unsupported versions, did not disable by default the resolution of URI references in a DTD declaration when processing user-provided XML documents. This enabled an XXE attack.
The ActiveDirectoryLdapAuthenticator in Spring Security versions 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds, it may incorrectly authenticate a user who supplies an empty password.
The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers, violating security assumptions regarding the evaluation difficulty of the Proof-of-Work function.
An issue was discovered in Oniguruma 6.2.0, used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation, which could lead to an invalid pointer dereference.
An issue was discovered in Oniguruma 6.2.0, used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5, where a heap out-of-bounds write occurs in bitset_set_range() due to an uninitialized variable from an incorrect state transition. This can lead to memory corruption.