CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The arkeiad daemon in the Arkeia Backup Agent in version 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via crafted requests involving the ARKFS_EXEC_CMD operation.
In GLPI before version 0.85.3, there is an unrestricted file upload vulnerability that allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket.
Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2. A remote attacker can exploit a trailing \u in a JSON string passed to cJSON_Parse, leading to arbitrary code execution.
The Anchor CMS version 0.9.x has a vulnerability that allows remote attackers to conduct PHP object injection attacks. Attackers can execute arbitrary PHP code via a crafted serialized object in a cookie.
IBM QRadar SIEM version 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges by leveraging admin access.
Unspecified vulnerability in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unknown vectors.
The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
Buffer overflow in Canary Labs Trend Web Server before version 9.5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet.
libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.
Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559 allows remote attackers to read arbitrary files via a crafted KCSOSC_ERROR_PAGE parameter.
A vulnerability in libstagefright in Android through version 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.
Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do.
A use-after-free vulnerability in the xprt_set_caller function in rpcb_svc_com.c in rpcbind version 0.2.1 and earlier allows remote attackers to cause a daemon crash via crafted packets involving a PMAP_CALLIT code.
A vulnerability in kernel_crashdump in Apport before version 2.19 allows local users to cause a denial of service (disk consumption) or potentially gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
A vulnerability in lxc before version 1.0.8 and 1.1.x before version 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on (1) mount target or (2) bind mount source.
In SampleTable.cpp in libstagefright in Android before version 5.1.1 LMY48I, integer promotion is not properly considered, allowing remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data.
CVE-2015-3864 involves an integer underflow in the MPEG4Extractor::parseChunk function in libstagefright, allowing remote attackers to execute arbitrary code via crafted MPEG-4 data. This issue exists due to an incomplete fix for CVE-2015-3824.
Multiple integer overflows in the Blob class in keystore/keystore.cpp in Android before version 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation.
In Android 5.x before version 5.1.1 LMY48M, the password entry input field in the lockscreen does not restrict the number of characters, allowing physically proximate attackers to bypass intended access restrictions via a long password that triggers a SystemUI crash.
The checkDestination function in SMSDispatcher.java in Android before version 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, allowing attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application.