CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The _TIFFVGetField function in tif_dirinfo.c in LibTIFF version 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.
Xen versions 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory, thereby gaining host OS privileges. The issue arises from mishandling of instruction pointer truncation during emulation.
The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.
CVE-2016-6801 involves a content-type check vulnerability in Jackrabbit-Webdav, allowing remote attackers to hijack the authentication of victims for resource creation via an HTTP POST request with a missing or crafted Content-Type header.
Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code.
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 is vulnerable to authentication bypass. Remote attackers can gain administrative access by sending 'special packages' to the LAN interface.
PowerDNS Authoritative Server before version 3.4.10 does not properly handle dots in labels, allowing remote attackers to cause a denial of service via a crafted DNS query.
PowerDNS (also known as pdns) versions before 3.4.10 allow remote attackers to cause a denial of service (backend CPU consumption) via a long qname.
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
Buffer overflow in the C cli shell in Apache Zookeeper before version 3.4.9 and 3.5.x before version 3.5.3, occurring when using the 'cmd:' batch mode syntax, allows attackers to have unspecified impact via a long command string.
Fortinet FortiWan before version 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosis_control.php.
The archive_read_format_cpio_read_header function in libarchive before version 3.2.1 allows remote attackers to cause an application crash via a CPIO archive with a large symlink.
Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before version 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.
A stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before version 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.
Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before version 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, leading to a heap-based buffer overflow.
A use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before version 2.1.1 allows remote attackers to have unspecified impact via unknown vectors.
Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allows remote attackers to obtain administrative access by leveraging knowledge of these passwords.