CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
IBM WebSphere Application Server versions 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system.
IBM WebSphere MQ version 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion.
IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access.
The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before version 8.5 and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to obtain active session ids, enabling them to bypass authentication or gain privileges via unspecified vectors.
The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application.
Integer overflow in the _IO_wstr_overflow function in the GNU C Library (glibc) before version 2.22 can lead to application crashes or potentially allow arbitrary code execution. Attackers can exploit this vulnerability by manipulating size calculations in bytes, triggering a heap-based buffer overflow.
The MemcmpLowercase function in Suricata before version 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.
ImageMagick version 6.8.9.9 allows remote attackers to cause application crashes, leading to denial of service.
A logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
A memory leak in ImageMagick can be exploited by remote attackers to cause a denial of service through excessive memory consumption.
The jng decoder in ImageMagick version 6.8.9.9 allows remote attackers to have an unspecified impact on the system.
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
The DecodePSDPixels function in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
A memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
The ReadPSDLayers function in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to 'throwing of exceptions.'
Libavcodec in FFmpeg before version 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.
The sg_ioctl function in the Linux kernel through version 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service by triggering an invalid Unicode property lookup, leading to segmentation violation and application crash.
The git-prompt.sh script in Git before version 1.9.3 does not sanitize branch names in the PS1 variable, allowing malicious repositories to execute code.