CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The wrap_lines_smart function in ass_render.c in libass before version 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to '0/3 line wrapping equalization.'
Dbclient in Dropbear SSH before version 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.
The dropbearconvert command in Dropbear SSH before version 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.
CVE-2016-7406 in Dropbear SSH before version 2016.74 has a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Umbraco before version 7.4.0 allows remote attackers to bypass anti-forgery security measures and conduct cross-site request forgery (CSRF) attacks, as demonstrated by editing user account information in the templates.asmx.cs file.
The Page_Load function in Umbraco before version 7.4.0 allows remote attackers to conduct server-side request forgery (SSRF) attacks via the url parameter.
The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY, leading to an invalid free.
libplist allows attackers to cause a denial of service through large memory allocation and crash via vectors involving an offset size of zero.
Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts.
CVE-2017-5613 is a format string vulnerability in cgiemail and cgiecho that allows remote attackers to execute arbitrary code via format string specifiers in a template file.
Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (]).
Irssi versions 0.8.18 and earlier before 0.8.21 allow remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8.
Irssi versions 0.8.17 and earlier before 0.8.21 are vulnerable to an attack that can lead to denial of service through a crafted ANSI x8 color code causing an out-of-bounds read and application crash.
A use-after-free vulnerability in Irssi before version 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message.
The nickcmp function in Irssi before version 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.
In version 1.12.0 of the mcollective-puppet-agent plugin on Windows installations, a non-administrator user can create an executable that will be executed with administrator privileges on the next 'mco puppet' run. Puppet Enterprise users are not affected.
CVE-2016-10206 is a CSRF vulnerability in Zoneminder 1.30 and earlier that allows remote attackers to hijack user authentication for requests that change passwords and possibly other unspecified impacts.
Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie.
CVE-2016-10204 is an SQL injection vulnerability in Zoneminder 1.30 and earlier that allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.
The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.