CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.27)
An issue was discovered in certain Apple products, including iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4, related to the third-party 'SQLite' product. Versions before 3.19.3 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
An issue was discovered in certain Apple products, including macOS before 10.13, related to the third-party 'file' product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
An issue was discovered in certain Apple products, including macOS before 10.13, related to the third-party 'file' product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
An issue was discovered in certain Apple products, including macOS before 10.13, related to the third-party 'file' product. Versions before 5.30 allow remote attackers to cause application crashes or possibly have unspecified other impacts.
An issue was discovered in certain Apple products, including macOS before 10.13, related to the third-party 'file' product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
An issue was discovered in certain Apple products, including macOS before 10.13, related to the third-party 'file' product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
An issue was discovered in certain Apple products, including macOS before 10.13, related to the third-party 'file' product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.
An issue was discovered in certain Apple products, including iOS, tvOS, and watchOS, related to the 'Wi-Fi' component. It may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service through crafted Wi-Fi traffic.
An issue was discovered in certain Apple products related to the 'Wi-Fi' component. iOS, tvOS, and watchOS versions before 11, 11, and 4 respectively are vulnerable to attacks that may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service via crafted Wi-Fi traffic.
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.
An issue was discovered in certain Apple products related to the 'Wi-Fi' component. iOS versions before 11, tvOS before 11, and watchOS before 4 are vulnerable to attacks that may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service via crafted Wi-Fi traffic.
The glob function in the GNU C Library (glibc) before version 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
In pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93, setting snaplen may truncate packets, allowing remote attackers to send arbitrary data while avoiding detection via crafted packets.
The GNU C Library (glibc) before version 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function. This issue is related to the processing of home directories using the ~ operator followed by a long string.
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe versions from 11.5.1 HF6 to 12.1.2 on VIPRION platforms, the script synchronizing SafeNet HSM configuration between blades in a clustered deployment logs the HSM partition password in cleartext to the '/var/log/ltm' log file.
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user.
A vulnerability in the Oracle Hospitality Reporting and Analytics component allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and cause the system to crash.
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery) allows easy exploitation by a low privileged attacker with network access via HTTP. This can lead to the takeover of Oracle Hospitality Reporting and Analytics, significantly impacting additional products.
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications allows an unauthenticated attacker with network access via HTTP to take control of the system. Affects versions 8.5.1 and 9.0.0.