CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The BN_bn2dec function in OpenSSL before 1.1.0 does not properly validate division results, which may lead to application crashes or denial of service.
The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, allowing remote attackers to cause a denial of service via spoofed DTLS records.
The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages. This allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and in versions 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and in versions 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Integer overflow in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contains a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.