CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in sudoedit before version 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers.
The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before version 2.8.2 does not enforce minimum and maximum value constraints on tile coordinates, allowing remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, allowing remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted HEVC data.
The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before version 2.8.2 omits certain width and height checks, allowing remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.
The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before version G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory corruption) via a crafted BMP image file.
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery (SSRF) attacks, and execute arbitrary PHP code via a crafted HTTP header.
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter.
The KVM subsystem in the Linux kernel through 4.2.6 and Xen 4.3.x through 4.6.x allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (Debug) exceptions related to svm.c.
Buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before version 1.500.004 for the HART Protocol allows remote authenticated users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HART reply.
IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 is vulnerable to remote attacks that can cause denial of service through memory consumption via crafted requests.
Cisco Aironet 1800 devices with software 8.1(131.0) are vulnerable to a denial of service attack that can be triggered by remote attackers improperly establishing many SSHv2 connections.
Multiple buffer overflows in the png_set_PLTE and png_get_PLTE functions in libpng before version 1.0.64 and in versions 1.1.x, 1.2.x, 1.3.x, 1.4.x, 1.5.x, and 1.6.x before their respective versions may allow remote attackers to cause application crashes or potentially other unspecified impacts via a small bit-depth value in an IHDR (image header) chunk in a PNG image.
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
A use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript that improperly interacts with the Cascading Style Sheets (CSS) empty-cells property for a TABLE element.
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, allowing remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function.
CVE-2015-8113 describes an untrusted search path vulnerability in the client of Symantec Endpoint Protection (SEP) 12.1 before version 12.1-RU6-MP3, allowing local users to gain privileges via a Trojan horse DLL in a client install package.
A race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before version 7.3.1.5 and Lenovo Switch Center before version 8.1.2.0 allows remote attackers to obtain privileged-account access. Attackers can exploit this to provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files.
The administration-panel web service in IBM System Networking Switch Center (SNSC) before version 7.3.1.5 and Lenovo Switch Center before version 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.
A race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before version 7.3.1.5 and Lenovo Switch Center before version 8.1.2.0 allows remote attackers to obtain privileged-account access. Attackers can exploit this to provide FileReader.jsp input containing directory traversal sequences to read arbitrary text files.
Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java port.