CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The UDP parser in tcpdump before version 4.9.0 has a buffer overflow in the udp_print() function.
The RTP parser in tcpdump before version 4.9.0 has a buffer overflow in the rtp_print() function in print-udp.c.
The RTCP parser in tcpdump before version 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().
The PPP parser in tcpdump before version 4.9.0 has a buffer overflow in the ppp_hdlc_if_print() function.
The PIM parser in tcpdump before version 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
The MPLS parser in tcpdump before version 4.9.0 has a buffer overflow in the mpls_print() function in print-mpls.c.
The LLC/SNAP parser in tcpdump before version 4.9.0 has a buffer overflow in the llc_print() function in print-llc.c.
The PPPoE ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the juniper_parse_header() function.
The IPComp parser in tcpdump before version 4.9.0 has a buffer overflow in the ipcomp_print() function in print-ipcomp.c.
The IEEE 802.11 parser in tcpdump before version 4.9.0 has a buffer overflow in the ieee802_11_radio_print() function.
The Ethernet parser in tcpdump before version 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
The compressed SLIP parser in tcpdump before version 4.9.0 has a buffer overflow in the sl_if_print() function in print-sl.c.
The ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the function print-atm.c:oam_print().
The ARP parser in tcpdump before version 4.9.0 has a buffer overflow in the arp_print() function in print-arp.c.
The AH parser in tcpdump before version 4.9.0 has a buffer overflow in the ah_print() function in print-ah.c.
An error in the lha_read_file_header_1() function in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access, potentially causing a crash via a specially crafted archive.
Palo Alto Networks Terminal Services Agent before version 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation.
Palo Alto Networks Terminal Services Agent before version 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors.
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications. It requires interaction from a third party, which may lead to unauthorized access to critical data.
A vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.