CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.
PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.
The vulnerability allows remote file uploads in WordPress Plugin Mobile App Native version 3.0.
In ImageMagick before version 6.9.4-5, a vulnerability allows remote attackers to cause application crashes by triggering too many exceptions, leading to a buffer overflow.
Buffer overflow in coders/tiff.c in ImageMagick before version 6.9.5-1 allows remote attackers to cause application crash or have other unspecified impact via a crafted file.
Buffer overflow in coders/tiff.c in ImageMagick before version 6.9.5-1 allows remote attackers to cause application crash or have other unspecified impact via a crafted file.
Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, allowing a malicious DLL located in the current working directory of the installer to be loaded.
Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, allowing a malicious DLL located in the current working directory of the installer to be loaded.
Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, allowing a malicious DLL located in the current working directory of the installer to be loaded.
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
All versions and editions of Rapid7 Nexpose prior to 6.4.50 have a Java keystore encrypted with a static password 'r@p1d7k3y5t0r3', which is not modifiable by the user. The keystore stores saved scan credentials in a secure location on disk.
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
The 'OpenID Connect Relying Party and OAuth 2.0 Resource Server' (mod_auth_openidc) module before version 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an 'AuthType oauth20' configuration, allowing remote attackers to bypass authentication via crafted HTTP traffic.
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, related to unauthenticated CORBA interfaces that allow inappropriate access.
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier related to local privilege escalation. A race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured.
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows privileged remote command execution on NetBackup Server and Client.
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows arbitrary privileged command execution using whitelist directory escape with '../' substrings.
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier related to hostname-based security that is vulnerable to DNS spoofing.