CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before version 20161124 allows remote attackers to cause a denial of service via an out-of-bounds read.
Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before version 20161124 can be exploited by remote attackers.
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
Buffer overflow in coders/tiff.c in ImageMagick before version 6.9.4-1 allows remote attackers to cause application crash or unspecified other impact via a crafted TIFF file.
Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or have other unspecified impacts via a crafted file.
Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or have other unspecified impacts via a crafted file.
Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or other unspecified impacts via a crafted file.
Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or other unspecified impacts via a crafted file.
Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before version 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
A use-after-free vulnerability in the ReadPWPImage function in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
Buffer overflow in the ReadRLEImage function in ImageMagick before version 6.9.4-4 allows remote attackers to cause application crashes or other unspecified impacts via a crafted RLE file.
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
PHPMemcachedAdmin version 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to serialized data and the last part of the concatenated filename, which creates a file in the webroot.
The Konke Smart Plug K does not require authentication for TELNET sessions, allowing remote attackers to obtain 'equipment management authority' via TCP traffic to port 23.
Nessus versions 6.6.2 to 6.10.3 contain a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode.
QNAP QTS before version 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.
QNAP QTS before version 4.2.4 Build 20170313 allows attackers to gain administrator privileges and access sensitive information via unspecified vectors.
QNAP QTS versions before 4.2.4 Build 20170313 allow attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.