CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class related to objects at multiple presentation levels. Successful exploitation could lead to arbitrary code execution.
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class. Successful exploitation could lead to arbitrary code execution.
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search strategies. Successful exploitation could lead to arbitrary code execution.
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow/underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution.
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow/underflow vulnerability in the RegExp class related to alternation functionality. Successful exploitation could lead to arbitrary code execution.
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
An issue was discovered in OX Guard before version 2.4.0-rev8 related to the use of an authentication token for identifying and transferring guest users' credentials. The OX Guard API acts as a padding oracle, allowing attackers to guess the correct padding.
An issue was discovered in Open-Xchange OX AppSuite before version 7.8.0-rev27 related to the 'defer' servlet, which allows redirecting a client to a specified URL. Missing checks allowed arbitrary URLs to be provided as redirection targets.
An issue exists in Open-Xchange Guard before version 2.2.0-rev8 with the 'getprivkeybyid' API, which allows downloading a PGP Private Key for a specific user after providing authentication credentials. It is possible to download another user's key if passwords are identical, creating a risk of unauthorized access.
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052.
CVE-2016-1000156 is a vulnerability related to an incomplete fix for remote file upload in Mailcwp version 1.100. It allows attackers to upload malicious files to the server.
An exploitable buffer overflow exists in the Hyprlofs file system in Joyent SmartOS. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES, which can lead to unauthorized memory access and privilege escalation.
A buffer overflow vulnerability exists in the Hyprlofs file system in Joyent SmartOS 20161110T013148Z. The issue is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with 32-bit file systems.
An exploitable buffer overflow exists in the Hyprlofs file system in Joyent SmartOS. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES, which may lead to unauthorized memory access.
An exploitable buffer overflow exists in the Joyent SmartOS Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES, leading to unauthorized memory access.
An exploitable integer overflow exists in the Hyprlofs file system in Joyent SmartOS. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with 32-bit file systems.
An exploitable integer overflow exists in the Hyprlofs file system in Joyent SmartOS. An attacker can craft an input that can cause a kernel panic and potentially lead to privilege escalation through the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES.
Routery NETGEAR R6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000 oraz D6220, D6400, D7000 przed określonymi wersjami oprogramowania są podatne na zdalne wykonanie dowolnych poleceń przez atakujących. Wykorzystują oni metaznaki powłoki w ścieżce do cgi-bin.