CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before version 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
A stack-based buffer overflow in the reslist function in ntpq in NTP before version 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers to have unspecified impact via a long flagstr variable in a restriction list response.
Multiple buffer overflows in the ctl_put* functions in NTP before version 4.2.8p10 and 4.3.x before version 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable.
There is a stack-based buffer overflow in the Windows installer for NTP before version 4.2.8p10 and 4.3.x before version 4.3.94. This allows local users to have unspecified impact via an application path on the command line.
The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, allowing local users to execute arbitrary code via unspecified vectors, leading to an out-of-bounds memory write.
HKDF in cryptography before version 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to a system crash. This can be achieved by sending a large number of crafted packets, triggering a memory allocation failure.
The sunxi-debug driver in the Allwinner 3.4 legacy kernel for H3, A83T, and H8 devices allows local users to gain root privileges by sending 'rootmydevice' to /proc/sunxi_debug/sunxi_debug.
Off-by-one error in the EAP-PWD module in FreeRADIUS from version 3.0 to 3.0.8 leads to a buffer overflow.
The EAP-PWD module in FreeRADIUS versions 3.0 through 3.0.8 allows remote attackers to have unspecified impact via crafted commit or confirm messages, leading to an out-of-bounds read.
Samsung Account (com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 is vulnerable to man-in-the-middle attacks, allowing attackers to obtain sensitive information and execute arbitrary code.
GALAXY Apps before version 14120405.03.012 is vulnerable to man-in-the-middle attacks, allowing attackers to obtain sensitive information and execute arbitrary code.
The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.
Integer overflow in hw/virtio/virtio-crypto.c in QEMU allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, triggering a heap-based buffer overflow.
CVE-2017-5899 describes a directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before version 14.8.16. This allows local users to write to arbitrary files, potentially gaining root privileges.
httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header.
Versions of ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before version 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitrary code via a crafted filesystem.
A stack-based buffer overflow in the firmware of Broadcom Wi-Fi HardMAC SoC chips occurs when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM. This allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE (156).