CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a Class 0 SMS message.
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages 'type confusion' during serialized-object handling.
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) versions 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) versions 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
EMC RSA Certificate Manager (RCM) before version 6.9 build 558 and RSA Registration Manager (RRM) before version 6.9 build 558 are vulnerable to an attack that can cause a remote denial of service on the Administration Server by sending an invalid MIME email message with a multipart/* Content-Type header.
CVE-2015-1875 is an SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier versions. It allows remote attackers to execute arbitrary SQL commands via the transactionID parameter.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2015-1625.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 8 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Microsoft Internet Explorer 10 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
A vulnerability in Microsoft Excel, PowerPoint, and Word 2007 and 2010 allows remote attackers to execute arbitrary code via a crafted Office document.
A vulnerability in Microsoft Windows systems allows local users to gain privileges via a malicious DLL in the current working directory. The issue occurs when accessing the icon of crafted shortcuts in Windows Explorer.
The Adobe Font Driver in Windows allows remote attackers to execute arbitrary code via a crafted website or file. This is a remote code execution vulnerability.
Adobe Font Driver in Windows allows remote attackers to execute arbitrary code via a crafted website or file. This is a remote code execution vulnerability affecting multiple versions of Windows.
Adobe Font Driver in Windows allows remote attackers to execute arbitrary code via a crafted website or file. This is a remote code execution vulnerability.
The Adobe Font Driver in Windows allows remote attackers to execute arbitrary code via a crafted website or file. This is a vulnerability distinct from others identified in CVE-2015.