CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object.
Directory traversal vulnerability in the safer_name_suffix function in GNU tar versions 1.14 through 1.29 may allow remote attackers to bypass an intended protection mechanism and write to arbitrary files due to improper sanitization of the file_name parameter.
Django versions before 1.8.16, 1.9.11, and 1.10.3, when DEBUG is enabled, allow remote attackers to conduct DNS rebinding attacks due to failure to validate the HTTP Host header against ALLOWED_HOSTS.
Django versions 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user, making it easier for remote attackers to gain access to the database server.
The trove service user in Openstack deployment and Trove Barclamp in the Crowbar Framework has a default password, making it easier for remote attackers to gain access via unspecified vectors.
The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service via a forged NTP packet, triggering a communication loop.
Funkcja kex_input_kexinit w pliku kex.c w OpenSSH w wersjach 6.x i 7.x do 7.3 umożliwia zdalnym atakującym spowodowanie odmowy usługi (zużycie pamięci) poprzez wysyłanie wielu duplikatów żądań KEXINIT. Zgłoszono, że zespół OpenSSH nie traktuje tego jako problemu bezpieczeństwa.
A race condition in the ion_ioctl function in the Linux kernel before version 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) by calling ION_IOC_FREE on two CPUs simultaneously.
In the Linux kernel before version 4.0, a vulnerability allows local users to bypass the 'strict page permissions' protection mechanism and modify the system-call table, potentially gaining elevated privileges.
In the Linux kernel before version 4.4, there is a vulnerability that allows local users to gain elevated privileges via crafted F_OFD_GETLK, F_OFD_SETLK, or F_OFD_SETLKW commands in an fcntl64 system call.
In Roundcube versions before 1.1.7 and 1.2.x before 1.2.3, the lack of SMTP server configuration and the enabling of the sendmail program does not properly restrict the use of custom envelope-from addresses on the sendmail command line. This allows remote authenticated users to execute arbitrary code via a modified HTTP request that sends a crafted e-mail message.
The icmp6_send function in the Linux kernel up to version 4.8.12 omits a certain check of the dst data structure, allowing remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet.
CVE-2016-8102 describes an unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129, allowing local users to launch processes with elevated privileges.
In BlueZ 5.42, an out-of-bounds read was identified in the 'packet_hexdump' function in the 'monitor/packet.c' source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.
In BlueZ 5.42, a buffer overflow was observed in the 'read_n' function in the 'tools/hcidump.c' source file. This issue can be triggered by processing a corrupted dump file, resulting in hcidump crash.
In MapServer before version 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.
A race condition in the Linux kernel through version 4.8.12 in net/packet/af_packet.c allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version.
Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.
The mod_http2 module in Apache HTTP Server versions 2.4.17 to 2.4.23 does not restrict request-header length when the Protocols configuration includes h2 or h2c. This allows remote attackers to cause a denial of service via crafted CONTINUATION frames in an HTTP/2 request.
The file scanning mechanism JFilterInput::isFileSafe() in Joomla! CMS before version 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, allowing users to upload and execute files with .php6, .php7, .phtml, and .phpt extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.