CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple integer overflows in the TRE library and musl libc can lead to memory corruption. Attackers can exploit a large number of states or tags, resulting in an out-of-bounds write.
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
In Exponent CMS version 2.3.9, the install/index.php file allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter.
Funkcja rsa_verify_hash_ex w bibliotece LibTomCrypt, używana w OP-TEE przed wersją 2.2.0, nie weryfikuje, czy długość wiadomości jest równa długości danych zakodowanych w ASN.1. To umożliwia zdalnym atakującym fałszowanie podpisów RSA lub certyfikatów publicznych za pomocą ataku na fałszowanie podpisów Bleichenbachera.
Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.
Samsung devices with Android KK (4.4), L (5.0/5.1), or M (6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C.
Versions of Crypto++ (cryptopp) before 5.6.4 have a timing attack protection issue in the Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock functions. Compiler optimization may allow attackers to conduct timing attacks.
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
MCollective versions 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allow remote attackers to execute arbitrary code via the mco ping command.
In version 3.20161219 of ikiwiki, there is an issue with improper checking of access permission changes for pages when the git and recentchanges plugins and CGI interface are enabled. This allows remote attackers to revert certain changes by leveraging permissions to modify the page before the revision was made.
The generate_smb_nt_hash function in GOsa allows remote attackers to execute arbitrary commands via a crafted password.
The click/install.py file in the click library does not require files in package filesystem tarballs to start with './', allowing remote attackers to install an alternate security policy and gain privileges via a crafted package.
W OpenSSH przed wersją 7.3, gdy do haszowania haseł użytkowników używane są algorytmy SHA256 lub SHA512, sshd stosuje haszowanie BLOWFISH dla statycznego hasła, gdy nazwa użytkownika nie istnieje. To umożliwia zdalnym atakującym enumerację użytkowników poprzez wykorzystanie różnicy czasowej w odpowiedziach, gdy podane jest długie hasło.
CVE-2016-8495 describes an improper certificate validation vulnerability in Fortinet FortiManager versions 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1. This allows a remote attacker to spoof a trusted entity using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
A crash in libmysqlclient.so occurs in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5, as well as in MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
A remote out of bound write / memory corruption vulnerability exists in Nitro Pro 10.5.9.9's PDF parsing functionality. A specially crafted PDF file can trigger this vulnerability.
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution.
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption.
An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).
Vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.