CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In TrustZone, an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
In TrustZone, a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
In TrustZone, a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.
In TrustZone, a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
In TrustZone, a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
In TrustZone, a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel.
In TrustZone, there is an integer overflow vulnerability that could lead to a buffer overflow in a DRM routine in all Android releases from CAF using the Linux kernel.
All Android releases from CAF using the Linux kernel may have an issue with PKCS#1 v1.5 signature verification as they may not check padding.
Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.
All Android releases from CAF using the Linux kernel may be vulnerable to a buffer overflow that can occur if an OEM customizes the app region size due to a hard-coded value.
INFOR EAM V11.0 Build 201410 has a SQL injection vulnerability via search fields, related to the filtervalue parameter.
Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file.
Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file.
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. This issue is fixed in 2.3.15 and 2.4.2.
A boundary error in the 'foveon_load_camf()' function in LibRaw-demosaic-pack-GPL2 before version 0.18.2 can be exploited to cause a stack-based buffer overflow.
An integer overflow error in the 'foveon_load_camf()' function in LibRaw-demosaic-pack-GPL2 before version 0.18.2 can lead to a heap-based buffer overflow.
A remote code execution vulnerability exists in Microsoft Chakra Core related to the way JavaScript engines render when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.