CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
NetApp Data ONTAP versions 9.0 and 9.1 before 9.1P1 allow remote authenticated users who own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the owner_rights ACL entry.
The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID, allowing local users to gain privileges via the HESIOD_CONFIG or HES_DOMAIN environment variable and leveraging certain SUID/SGUID binaries.
Siemens SINUMERIK Integrate Operate Clients in versions from 2.0.3.00.016 to 2.0.6 (exclusive) and from 3.0.4.00.032 to 3.0.6 (exclusive) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.
In PoDoFo 0.9.4, there is a heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function, allowing remote attackers to have unspecified impact via a crafted file.
Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.
Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.
Integer overflow in tools/tiffcp.c in LibTIFF versions 4.0.7 and 3.9.x allows remote attackers to have unspecified impact via a crafted image, leading to a heap-based buffer overflow.
Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF allows remote attackers to have unspecified impact via a crafted image. Versions 4.0.7 and 3.9.x up to 4.0.6 are affected.
The Intel PSET Application Install wrapper in Intel Parallel Studio XE and other products before 2017 Update 2 allows an attacker to launch a process with escalated privileges.
A directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via an encoded sequence %2E%2E%252e in the image path.
Multiple integer overflows in the vnc_connection_server_message and vnc_color_map_set functions in gtk-vnc before version 0.7.0 may allow remote servers to cause a denial of service (crash) or potentially execute arbitrary code via vectors involving SetColorMapEntries, leading to a buffer overflow.
In versions of gtk-vnc before 0.7.0, the boundaries of subrectangle-containing tiles are not properly checked, allowing remote servers to execute arbitrary code via manipulated x, y coordinates in crafted rre, hextile, or copyrect tiles.
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before version 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
In libdwarf before version 20161124, there is a vulnerability that allows remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, known as a 'negation overflow'.
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service by terminating a TLS handshake early, leading to invalid memory access and server crash.
A heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution.
An exploitable integer-overflow vulnerability exists within Iceni Argus when converting a malformed PDF to XML. The application attempts to convert each character from a font into a polygon, leading to writing outside the bounds of the buffer.
An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. The issue arises when converting a malformed PDF to XML, as the software trusts an index within the font object and uses it to write the font's name to an object within an array.
There is a heap-based buffer overflow vulnerability in Iceni Argus that can be exploited. The issue occurs when converting a malformed PDF, leading to a lack of bounds checking by the LZW decoder.
There is a heap-based buffer overflow vulnerability in Iceni Argus that can be exploited. The issue occurs when converting a PDF with a malformed font to XML, leading to a buffer smaller than the requested size being returned.