CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller affects multiple software versions. This issue exists in versions prior to 10.2.4 HF13, 11.2.1 HF15, and others listed.
In buffer.c in ISC BIND 9.10.x before version 9.10.3-P3, when debug logging is enabled, remote attackers can cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via OPT data or an ECS option.
The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method.
Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the php_escape_shell_cmd or php_escape_shell_arg function, leading to a heap-based buffer overflow.
The gdImageRotateInterpolated function in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service via a large bgd_color argument to the imagerotate function.
CVE-2015-8617 describes a format string vulnerability in the zend_throw_or_error function in PHP 7.x before version 7.0.1. This allows remote attackers to execute arbitrary code via format string specifiers in a string misused as a class name, leading to incorrect error handling.
A use-after-free vulnerability in the Collator::sortWithSortKeys function in PHP 7.x before version 7.0.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array.
The __call method in the SoapClient class in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, allowing remote attackers to execute arbitrary code via crafted serialized data that triggers a 'type confusion' in the serialize_function_call function.
Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.
A use-after-free vulnerability in the unserialize implementation in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.
Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via mishandled ArrayObject, SplObjectStorage, and SplDoublyLinkedList during unserialization.
The php_str_replace_in_subject function in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code via a crafted value in the third argument to the str_ireplace function.
A stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.
A directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience allows remote attackers to read arbitrary files. This affects versions before 8.7.1.8818, 8.8 before 8.8.0.9026, and 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144.
Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 is vulnerable to man-in-the-middle attacks, allowing attackers to obtain sensitive information, including login credentials.
Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.
Fortinet FortiAnalyzer, FortiSwitch, FortiCache, and FortiOS have a hardcoded passphrase for the Fortimanager_Access account, allowing remote attackers to gain administrative access via an SSH session.
Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before version 8.1 allows remote attackers to cause a denial of service via a crafted RPC request.
Integer overflow in the Kernel service in Advantech WebAccess before version 8.1 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted RPC request.