CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A NULL pointer dereference in the fimg2d driver for Android L (5.0/5.1) and M (6.0) on Samsung Exynos processors allows for unspecified impact via unknown vectors.
The handle_certificate function in Trend Micro Virtual Mobile Infrastructure before version 5.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the password.
Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server allow remote attackers to read and delete arbitrary files via the tmpfname parameter in several PHP scripts.
Trend Micro Smart Protection Server versions 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow local web server users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory.
SnmpUtils in Trend Micro Smart Protection Server before specified builds allows remote authenticated users to execute arbitrary commands via shell metacharacters in the admin_notification.php parameters.
In ccca_ajaxhandler.php in Trend Micro Smart Protection Server before version 2.5 build 2200, 2.6 build 2106, and 3.0 build 1330, remote authenticated users can execute arbitrary commands via shell metacharacters in the host or apikey parameters in a register action, enable parameter in a save_stting action, or host or apikey parameters in a test_connection action.
Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current working directory.
Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.
The png_set_text_2 function in libpng before versions 1.0.67, 1.2.57, 1.4.20, 1.5.28, and 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference. This issue occurs when loading a text chunk into a png structure, removing the text, and then adding another text chunk.
Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.
The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.
Crypto++ (also known as cryptopp and libcrypto++) version 5.6.4 contains a bug in its ASN.1 BER decoding routine. This bug causes the library to allocate a memory block based on the length field of the ASN.1 object, leading to a noticeable delay during the wipe for large allocations when there are not enough content octets.
Crypto++ version 5.6.4 incorrectly uses the _malloca and _freea functions, which may lead to freeing the wrong pointer during memory reallocation.
NTP versions before 4.2.8p6 and 4.3.x before 4.3.90 are vulnerable to an attack that can lead to denial of service by tearing down client-server associations. Attackers can achieve this by sending broadcast packets with invalid authentication to a broadcast client.
NTP versions before 4.2.8p6 and 4.3.0 before 4.3.90 allow remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
An issue was discovered in MuJS before version 8f62ea10a0af68e56d5c00720523ebcba13c2e6a related to the MakeDay function in jsdate.c, which does not validate the month. This leads to an integer overflow when parsing a specially crafted JS file.
An issue was discovered in MuJS before version 4006739a28367c708dea19aeb19b8a1a9326ce08 related to the lack of a check for array length in the jsR_setproperty function. This leads to an integer overflow in the js_pushstring function when parsing a specially crafted JS file.
SQL injection vulnerability in class-wp-query.php in WP_Query in WordPress before version 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.
An issue was discovered on the D-Link DWR-932B router related to the lack of deny rules in the /var/miniupnpd.conf file.
An issue was discovered on the D-Link DWR-932B router, where a secure_mode=no line exists in /var/miniupnpd.conf.