CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks due to failure to specify a correct cache context.
A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website.
CVE-2016-6745 describes an elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05. A local malicious application could execute arbitrary code within the context of the kernel, posing a significant threat.
CVE-2016-6744 is a vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-6743 describes a vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6742 is a vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6741 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6740 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-6739 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-6738 is a vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6737 is a vulnerability in the Android kernel ION subsystem before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6736 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6735 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6734 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6733 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6732 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical.
CVE-2016-6731 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6730 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6729 is a vulnerability in the Qualcomm bootloader in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.