CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID versions 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands via the order_by parameter.
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order, or (3) filter_manufacturer_ids in a displayproducts action to index.php.
The bdfReadCharacters function in X.Org libXfont before version 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values. This allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.
The bdfReadCharacters function in X.Org libXfont before version 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read. This allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.
The bdfReadProperties function in X.Org libXfont before version 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a negative or large property count in a BDF font file.
An integer underflow in the EVP_DecodeUpdate function in OpenSSL allows remote attackers to cause memory corruption or denial of service via crafted base64 data that triggers a buffer overflow.
The cache handler in MyBB (MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors.
A stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbitrary code via a large PROCESS_HELLO message to the Message Dispatcher on TCP port 8000.
The XML parser in IBM Rational DOORS Next Generation and Rational Requirements Composer improperly detects recursion during entity expansion, which can lead to denial of service through memory consumption. Attackers can exploit a crafted XML document containing a large number of nested entity references.
SQL injection vulnerability in the WPML plugin before version 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed.
Cisco AnyConnect Secure Mobility Client version 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger the use of root privileges for software-package installation.
osc versions before 0.151.0 allow remote attackers to execute arbitrary commands via shell metacharacters in a _service file.
A use-after-free vulnerability in the sctp_assoc_update function in the Linux kernel before version 3.18.8 allows remote attackers to cause a denial of service through memory corruption and system panic. It may also lead to unspecified other impacts due to an INIT collision that results in improper handling of shared-key data.
The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, allowing local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.
The pmd_none_or_trans_huge_or_clear_bad function in the Linux kernel before version 3.13 on NUMA systems improperly determines whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, potentially leading to system crashes.
The implementation of certain splice_write file operations in the Linux kernel before version 3.16 does not enforce a restriction on the maximum size of a single file, allowing local users to cause a denial of service (system crash) or possibly have unspecified other impacts via a crafted splice system call.
Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before version 7.8.90 allows remote attackers to execute arbitrary code via unspecified vectors.
The SOAP web interface in SCADA Engine BACnet OPC Server before version 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.
CVE-2015-0980 describes a format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before version 2.1.371.24, allowing remote attackers to execute arbitrary code via format string specifiers in a request.
A heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before version 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet.