CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call.
Barco ClickShare CSC-1 devices with firmware before version 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image.
There is a directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1, CSM-1, and CSE-200 devices that allows remote attackers to read the /etc/shadow file. This affects firmware versions before 01.09.03 for CSC-1, before 01.06.02 for CSM-1, and before 01.03.02 for CSE-200.
Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors.
The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.
There is a privilege escalation vulnerability in Lenovo XClarity Administrator prior to version 1.2.0. Authenticated users may access log files that contain passwords for internal administrative LXCA accounts with temporary passwords.
Exponent CMS version 2.3.9 has a remote code execution vulnerability in /install/index.php. An attacker can upload a malicious 'exploit.tar.gz' file to the website and then extract it, leading to arbitrary code execution.
Exponent CMS version 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload a 'php' file to the website through uploader_paste.php, then overwrite /framework/conf/config.php, leading to arbitrary code execution.
CVE-2017-0404 is a privilege escalation vulnerability in the kernel sound subsystem that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0403 describes an elevation of privilege vulnerability in the kernel performance subsystem that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0394 is a vulnerability in Telephony that allows a remote attacker to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service.
CVE-2017-0389 describes a denial of service vulnerability in core networking that could allow a remote attacker to use specially crafted network packets to cause a device hang or reboot.
A vulnerability in Mediaserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
A privilege escalation vulnerability in the libnl library could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
CVE-2017-0384 is a privilege escalation vulnerability in libeffects in Audioserver that could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions from 4.4.4 to 7.1.
CVE-2017-0383 is a privilege escalation vulnerability in the Framework APIs that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions 7.0 and 7.1.
A vulnerability in the Framesequence library allows for remote code execution, enabling an attacker to execute arbitrary code in the context of an unprivileged process. This issue affects Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.
An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission.
A vulnerability in Binder allows a local malicious application to execute arbitrary code within the context of a privileged process. It requires compromising a privileged process first, which mitigates the risk.