CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2017-0337 is a privilege escalation vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0335 is a privilege escalation vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0333 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0307 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0306 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
A vulnerability in the Qualcomm GPU driver allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
CVE-2016-8417 is a vulnerability in the Qualcomm camera driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it requires compromising a privileged process and is mitigated by current platform configurations.
A race condition in the Linux kernel through version 4.10.1 in drivers/tty/n_hdlc.c allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.
A race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status.
The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
IBM QRadar version 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested.
IBM Qradar version 7.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view information in the back-end database.
IBM QRadar version 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands.
IBM QRadar Incident Forensics version 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability.
IBM QRadar version 7.2 is vulnerable to a denial of service due to an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or exhaust available memory resources.
IBM Tivoli Storage Manager (IBM Spectrum Protect) versions 6.1, 6.2, 6.3, and 7.1 do not perform sufficient authority checking on SQL queries. This allows an attacker to submit SQL queries that access database tables not intended for access by administrators.
The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service through memory consumption, as demonstrated by a large number of opening parenthesis and dollar signs, followed by {-2,16} and a large number of plus signs.
Exponent CMS versions 2.3.9 and earlier have an SQL injection vulnerability in filedownloadController.php. This allows remote attackers to execute arbitrary SQL commands via the fileid parameter.
CVE-2016-9020 is a SQL injection vulnerability in helpController.php in Exponent CMS version 2.3.9 and earlier. It allows remote attackers to execute arbitrary SQL commands via the version parameter.
CVE-2016-9019 is an SQL injection vulnerability in the activate_address function in addressController.php in Exponent CMS version 2.3.9 and earlier. It allows remote attackers to execute arbitrary SQL commands via the is_what parameter.