CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before version 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data, cause a denial of service, or execute arbitrary code via unspecified vectors.
HP Virtual Connect Enterprise Manager (VCEM) SDK before version 7.5.0, as used in HP Matrix Operating Environment before version 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Matrix Operating Environment before version 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Matrix Operating Environment before version 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment and other products, allows local users to gain privileges, which may lead to obtaining sensitive information, modifying data, or causing a denial of service.
Buffer overflow in HP Version Control Repository Manager (VCRM) before version 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
An unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in HP KeyView before version 10.23.0.1 and 10.24.x before version 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors.
A memory leak in PolarSSL before version 1.3.9 allows remote attackers to cause a denial of service through a large number of ClientHello messages.
A memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service through a large number of crafted X.509 certificates.
SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment.