CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.
The LZWEncode function in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the '-c lzw' option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
The ZIPEncode function in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the '-c zip' option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a hostname with an escaped trailing dot.
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.
The Tomcat init script in the tomcat7 package before version 7.0.56-3+deb8u4 and tomcat8 package before version 8.0.14-1+deb8u3 on Debian jessie, as well as in tomcat6 and libtomcat6-java packages before version 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file.
CVE-2016-5995 in IBM DB2 has an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse library accessed by setuid or setgid programs.
IBM WebSphere Application Server (WAS) versions 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, allowing remote attackers to obtain sensitive information via unspecified vectors.
The /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before version 243 and various versions of UAA and Elastic Runtime allows remote authenticated users to gain privileges by leveraging possession of a token.
Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before version 242 and in UAA, Elastic Runtime, and Ops Manager allow remote attackers to hijack the authentication of unspecified victims for requests that approve or deny a scope.
HPE Network Automation Software version 10.10 allows local users to write to arbitrary files via unspecified vectors.
The RMI service in HP Network Automation Software versions 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections and Commons BeanUtils libraries.
The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, allowing remote attackers to execute arbitrary Java code by registering MBeans.
Integer overflow in the gdImageWebpCtx function in the GD Graphics Library (libgd) through version 2.2.3, used in PHP through version 7.0.11, can lead to denial of service (heap-based buffer overflow) or other unspecified impacts via crafted imagewebp and imagedestroy calls.
The Microsoft Azure Active Directory Passport library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, allowing remote attackers to bypass authentication via a crafted token.
In buffer.c in ISC BIND 9 before version 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3, responses are not properly constructed, allowing remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
The gnutls_ocsp_resp_check_crt function in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism.
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
The unformat_24bit_color function in the format parsing code in Irssi before version 0.8.20, when compiled with true-color support enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
The server in Red Hat JBoss Operations Network (JON) allows remote attackers to execute arbitrary code via a crafted HTTP request when SSL authentication is not configured for server/agent communication. This vulnerability exists due to an incomplete fix for CVE-2016-3737.