CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before version 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, triggering a heap-based buffer overflow.
Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before version 0.7.6 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted image file.
The binary delta decoder in Mercurial before version 3.7.3 allows remote attackers to execute arbitrary code via (1) clone, (2) push, or (3) pull commands, related to (a) a list sizing rounding error and (b) short records.
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long header or URI that is matched against an improper regular expression.
F5 BIG-IP versions 11.3.x, 11.4.x before 11.4.1 build 685-HF10 and other listed components do not properly regenerate certificates and keys when deploying cloud images, allowing attackers to obtain them.
In Xymon 4.1.x, 4.2.x, and 4.3.x before version 4.3.25, xymond allows remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument.
In xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25, there is a vulnerability that allows remote attackers to read arbitrary files in the configuration directory via a 'config' command.
Multiple buffer overflows in xymond/xymond.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long filename, involving handling a 'config' command.
The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2 allows local users to gain privileges by writing crafted data to a shared memory region, triggering memory corruption.
Xen versions 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize the x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state. This allows local guest domains to obtain sensitive information from other domains.
Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.
In Git versions before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, there is a vulnerability that does not properly restrict allowed protocols in remote helper programs. This may allow remote attackers to execute arbitrary code via a URL in a .gitmodules file or other unknown sources in a submodule.
Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with 'illegal options.'
CVE-2016-2780 in Huawei UTPS before UTPS-V200R003B015D15SP00C983 has an untrusted search path vulnerability. This allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory.
A double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
Integer overflow in the graphics drivers of Huawei Mate S smartphones before versions CRR-TL00C01B160SP01, CRR-UL00C00B160, and CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, leading to a heap-based buffer overflow.
A heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) allows local users to gain privileges via a Unicode file path in an IOCTL request.
Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission.