CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in Intel McAfee ePolicy Orchestrator (ePO) allows remote attackers to execute arbitrary code via a crafted serialized Java object. It affects versions 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041.
The FontManager._get_nix_font_path function in Pygments versions 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
The Zip Attachments plugin before version 1.5.1 for WordPress has a directory traversal vulnerability in download.php, allowing remote attackers to read arbitrary files via a .. (dot dot) in the za_file parameter.
AVM FRITZ!OS before version 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, allowing remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code.
The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, allowing remote administrators with the 'Import value sets' permission to execute arbitrary PHP code via the exported values list in a ctools import.
The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended access restrictions and modify the mollom blacklist via unspecified vectors.
SAP Afaria version 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to 'Insecure signature.'
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff version 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
The EnableNetwork method in the Network class in Blueman before version 2.0.3 allows local users to gain privileges via the dhcp_handler argument.
An open redirect vulnerability exists in Blue Coat ProxySG versions 6.5 before 6.5.8.8 and 6.6, as well as in Advanced Secure Gateway (ASG) 6.6, which may allow remote attackers to redirect users to arbitrary websites.
The CoreUserInputHandler::doMode function in Quassel 0.10.0 allows remote attackers to cause an application crash via the "/op *" command in a query.
Juniper ScreenOS before version 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiation.
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
Fortinet FortiClient for Linux before build 2313, when installed in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc setuid program.
Dell Pre-Boot Authentication Driver (PBADRV.sys) version 1.0.1.5 allows local users to write to arbitrary physical memory locations, potentially leading to privilege escalation.
Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, allowing remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.
Buffer overflow in the CL_vsprintf function in Takumi Yamada DX Library before version 3.16 allows remote attackers to execute arbitrary code via a crafted string.
The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before version 16.4 does not properly validate serialized XML objects, allowing remote attackers to conduct SQL injection attacks via a crafted SOAP request.
HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors.