CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, related to the enabled CGI Servlet, allows the use of untrusted client data in the HTTP_PROXY environment variable. This may enable remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header.
Apache HTTP Server through 2.4.23 does not protect applications from untrusted client data in the HTTP_PROXY environment variable, allowing remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request.
The net/http package in Go through version 1.6 does not address namespace conflicts described in RFC 3875 section 4.1.18, exposing CGI applications to untrusted client data in the HTTP_PROXY environment variable. This may allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request.
PHP versions up to 7.0.8 do not address namespace conflicts as per RFC 3875, exposing applications to risks from untrusted client data in the HTTP_PROXY environment variable. This may allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header.
IBM Traveler versions 8.x and 9.x before 9.0.1.12 allow remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CSRF vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack the authentication of arbitrary users.
The Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, allowing remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
The restore_tqb_pixels function in libbpg versions 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, allowing remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related to a 'type confusion' issue.
IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, allowing remote attackers to hijack sessions by leveraging an unattended workstation.
IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, making it easier for remote attackers to gain access by leveraging an attack against the password algorithm.
A directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server and IBM Security Directory Server allows remote attackers to read arbitrary files via a '..' (dot dot) in a URL.
Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement and read or change parameter values via a direct request.
Moxa MGate MB3180 before 1.8, MB3280 before 2.7, MB3480 before 2.6, MB3170 before 2.5, and MB3270 before 2.7 use weak encryption, allowing remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.
Tollgrade LightHouse SMS before 5.1 patch 3 allows remote attackers to bypass authentication and restart the software via unspecified vectors.
An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before version 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER flag.
The Schneider Electric Pelco Digital Sentry Video Management System with firmware before version 7.14 has hardcoded credentials, allowing remote attackers to gain access and execute arbitrary code.
HPE iMC PLAT and other components before versions 7.2 E0403P04, 7.2 E0405P05, 7.2 E0401P04, 7.2 E0401P01, 7.2 E0402P02, and 7.2 E0405P05 are vulnerable to remote command execution by attackers exploiting a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
The CLI in Cisco IOS XR versions 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access.
Cisco WebEx Meetings Server version 2.6 allows remote authenticated users to conduct command-injection attacks via file type related to uploads, known as Bug ID CSCuy92715.
SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.