CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The ring_buffer_resize function in the profiling subsystem in the Linux kernel before version 4.6.1 mishandles certain integer calculations, allowing local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file.
The _prolog_error function in slurmd/req.c in Slurm before version 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability that allows a user to take control of an arbitrary file on the system in the event of a Prolog script failure. Exploitation of this vulnerability depends on the user's ability to cause or anticipate the failure of the script.
Menadżer pamięci dzielonej w sshd w OpenSSH przed wersją 7.4 nie zapewnia, że sprawdzenie granic jest egzekwowane przez wszystkie kompilatory. Może to umożliwić lokalnym użytkownikom uzyskanie uprawnień poprzez wykorzystanie dostępu do procesu separacji uprawnień w piaskownicy, związane z strukturami danych m_zback i m_zlib.
Plik authfile.c w sshd w OpenSSH przed wersją 7.4 nieprawidłowo uwzględnia skutki działania realloc na zawartości bufora, co może umożliwić lokalnym użytkownikom uzyskanie wrażliwych informacji o kluczach prywatnych poprzez wykorzystanie dostępu do procesu potomnego z ograniczonymi uprawnieniami.
W OpenSSH przed wersją 7.4, gdy separacja uprawnień nie jest używana, tworzone są przekazywane gniazda Unix jako root, co może umożliwić lokalnym użytkownikom uzyskanie uprawnień za pomocą nieokreślonych wektorów, związanych z plikiem serverloop.c.
Podatność w ssh-agent w OpenSSH przed wersją 7.4 umożliwia zdalnym atakującym wykonywanie dowolnych lokalnych modułów PKCS#11 poprzez wykorzystanie kontroli nad przekazywanym gniazdem agenta.
In Dotclear before version 2.10.3, there is an unrestricted file upload vulnerability in the fileUnzip->unzip method that allows remote authenticated users with permissions to manage media items to execute arbitrary code by uploading a ZIP file containing a file with a crafted extension.
In Veritas NetBackup Appliance versions 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x, a vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense.
Arista EOS versions 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service (device reboot) by sending crafted packets to the control plane.
The unserialize implementation in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data.
The php_wddx_push_element function in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service via out-of-bounds read and memory corruption using an empty boolean element in a wddxPacket XML document.
In PHP before 5.6.28 and 7.x before 7.0.13, a vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document.
A stack consumption vulnerability exists in the gdImageFillToBorder function in the GD Graphics Library (libgd) before version 2.2.2. This allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers the use of a negative color value.
PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, allowing remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.
A use-after-free vulnerability in the CURLFile implementation in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.
Tor versions before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had functions that expected buf_t data to be NUL terminated. The implementation in or/buffers.c did not ensure this termination, allowing remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data.
Integer signedness error in the dynamicGetbuf function in the GD Graphics Library (libgd) through version 2.2.3, used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call.
The get_icu_disp_value_src_php function in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which may lead to denial of service (buffer overflow) or other unspecified impacts.
A stack-based buffer overflow in the ures_getByKeyWithFallback function in ICU before version 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call.
NETGEAR Arlo base stations and Arlo Q and Arlo Q Plus devices with specific firmware versions use an easily predictable pattern for password generation, making them vulnerable to dictionary attacks.