CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The SAP_BASIS and SAP_ABA components in version 7.00 SP Level 0031 in SAP NetWeaver 2004s may allow remote attackers to spoof IP addresses written to the Security Audit Log. This issue is related to the network landscape.
Buffer overflow in the DBD::mysql module before version 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.
Directory traversal vulnerability in INDAS Web SCADA before version 3 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2016-6419 is an SQL injection vulnerability in Cisco Firepower Management Center versions 4.10.3 through 5.4.0 that allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
IBM WebSphere Application Server (WAS) versions 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol.
Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.
Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, making it easier for remote attackers to spoof meters by sniffing the network and engaging in an authentication handshake.
Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.
The Filter SDK in HPE KeyView versions 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors. This is a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4389.
The Filter SDK in HPE KeyView versions 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors. This is a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4390.
The Filter SDK in HPE KeyView versions 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors. This is a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-4390.
The Filter SDK in HPE KeyView versions 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors. This is a different vulnerability than CVE-2016-4388, CVE-2016-4389, and CVE-2016-4390.
American Auto-Matrix Aspect-Nexus and Aspect-Matrix applications before version 3.0.0 store passwords in cleartext, allowing remote attackers to obtain sensitive information by reading a file.
American Auto-Matrix Aspect-Nexus and Aspect-Matrix applications before version 3.0.0 allow remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file.
Beckhoff Embedded PC images before October 22, 2014, and ADS TwinCAT components may allow remote attackers to gain access via the Windows CE Remote Configuration Tool, CE Remote Display service, or TELNET service.
Beckhoff Embedded PC images before October 22, 2014, and ADS TwinCAT components do not restrict the number of authentication attempts, making it easier for remote attackers to gain access via a brute-force attack.
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class.
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input.
The client in EMC Replication Manager (RM) before version 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before version 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.