CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In MODX Revolution before version 2.5.2-pl, there is a directory traversal vulnerability in /connectors/index.php that allows remote attackers to manipulate local files via a crafted dir parameter.
In MODX Revolution before version 2.5.2-pl, there is a directory traversal vulnerability in /connectors/index.php that allows remote attackers to manipulate local files via a crafted id (also known as dir) parameter.
An out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array, leading to an out of bounds read within the server context.
An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mp_check function to incorrectly return success, leading to a denial of service vulnerability.
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagick's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution.
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. The generated HTML is executed in the local file security context by default, allowing access to remote and local URLs.
A malicious URL containing a quote character allowed for HTML code injection in KMail's plaintext viewer. The parser used on the URL restricts injection capabilities by preventing the inclusion of the equal sign (=) or a space, significantly limiting HTML functionality.
Siemens Desigo PX Web modules PXA40 and PXA30 use a pseudo random number generator with insufficient entropy to generate HTTPS certificates, potentially allowing remote attackers to reconstruct the corresponding private key.
The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before version 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode.
The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before version 3.1.4 is vulnerable to reading out-of-bounds memory when decoding a malformed AIFF file.
The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file.
Cloud Foundry and UAA versions before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3 have a vulnerability that allows attackers to gain privileges by accessing UAA logs and subsequently running a specially crafted application that interacts with a configured SAML provider.
Bundler 1.x may allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source.
A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045 in the openjpeg library. A crafted j2k image could cause the application to crash or potentially execute arbitrary code.
In the perl-Image-Info library, external entity expansion (XXE) was not disabled when processing an SVG file. An attacker could craft an SVG file that, when processed by an application using perl-Image-Info, could lead to denial of service or potential information disclosure.
In the perl-XML-Twig module, the `expand_external_ents` option, which is supposed to control external entity expansion, does not work correctly. External entities are always expanded, regardless of the option's setting.
It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?'. This could lead to the program connecting to a different host.
NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user.
python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password.