CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
The vulnerability in libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
The vulnerability in mediaserver in Android before version 5.1.1 LMY48T allows attackers to gain privileges via a crafted application.
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application.
Skia, as used in Android before version 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libutils in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file.
The Sonivox components in Android before version 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
The libstagefright library in Android before version 5.1.1 LMY48T has a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
The Runtime subsystem in Android before version 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, enabling access to Signature or SignatureOrSystem permissions.
Libstagefright in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
CVE-2015-7686 is an algorithmic complexity vulnerability in the Email-Address module for Perl, specifically in Address.pm, allowing remote attackers to cause a denial of service through a crafted string containing a list of email addresses and parenthesis characters associated with nested comments.
CVE-2015-5652 describes an untrusted search path vulnerability in python.exe in Python through version 3.5.0 on Windows, allowing local users to gain privileges via a malicious readline.pyd file in the current working directory.
The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service (device outage) via a long parameter.
Omron CX-One CX-Programmer w wersjach przed 9.6 oraz urządzenia PLC CJ2M przed wersją 2.1 i CJ2H przed wersją 1.5 przesyłają hasła w postaci niezaszyfrowanej. To umożliwia zdalnym atakującym pozyskanie wrażliwych informacji poprzez podsłuchiwanie sieci podczas żądania odblokowania PLC.