CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine.
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Unspecified vulnerability in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system.
Multiple off-by-one errors in the MakeBigReq and SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before version 1.6.0 may allow remote attackers to have unspecified impact via a crafted request, leading to a buffer overflow.
A stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.11.1 allows local users to gain privileges via unspecified vectors.
A stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.11.1 allows local users to gain privileges via unspecified vectors.
Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, allowing local users to execute arbitrary Python code and gain privileges via a crafted pickle file.
Adobe Flash Player w wersjach przed 13.0.0.281 oraz 14.x do 17.x przed 17.0.0.169 na systemach Windows i OS X oraz przed 11.2.202.457 na Linuksie pozwala atakującym na wykonanie dowolnego kodu lub spowodowanie odmowy usługi (uszkodzenie pamięci) poprzez nieokreślone wektory. Wykorzystanie tej podatności miało miejsce w praktyce w kwietniu 2015 roku.
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.281 and in versions 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
An unspecified vulnerability in HP Easy Deploy, present in versions before 3.0.1.1650, allows remote attackers to execute arbitrary code on HP Thin Client and HP Flexible Thin Client devices.
An unspecified vulnerability in HP Easy Deploy, present in versions before 3.0.1.1650, allows remote authenticated users to execute arbitrary code on HP Thin Client and HP Flexible Thin Client devices.
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.