CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent before version 1.03.30109 allows remote attackers to read arbitrary files via a .. (dot dot) in the GetFile parameter.
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 allows man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable.
A race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file. The issue is that the installation extracts the contents to temporary files before validating the signature.
The default configuration of Zenoss Core before version 5 allows remote attackers to read or modify database information by connecting to unspecified open ports.
The addAccount method in the Settings application in Android before version 5.0.0 does not properly create a PendingIntent, allowing attackers to use the SYSTEM uid to broadcast an intent with arbitrary component, action, or category information via a third-party authenticator in a crafted application.
Multiple SQL injection vulnerabilities in the queryLastApp method in the WAPPushManager module in Android before version 5.0.0 allow remote attackers to execute arbitrary SQL commands. The attack can be carried out via the wapAppId or contentType fields in a PDU for a malformed WAPPush message.
The java.io.ObjectInputStream implementation in Android before version 5.0.0 does not verify that deserialization will result in an object that meets the requirements for serialization. This allows attackers to execute arbitrary code via a crafted finalize method for a serialized object in an ArrayMap Parcel within an intent sent to system_service.
Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, allowing remote attackers to execute arbitrary code by spoofing the callhome server or deploying a crafted web site visited during a login session.
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public read or execute access via a move action.
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer version 0.9.9 and earlier does not check certain malloc return values, allowing remote VNC servers to cause application crashes or potentially execute arbitrary code by specifying a large screen size in FramebufferUpdate, ResizeFrameBuffer, or PalmVNCReSizeFrameBuffer messages.
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before version 3.16.2.4 and 3.17.x before version 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed. This allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding.
Multiple stack-based buffer overflows in HWOPOSScale.ocx and HWOPOSSCANNER.ocx in Honeywell OPOS Suite before version 1.13.4.15 allow remote attackers to execute arbitrary code via a crafted file that is improperly handled by the Open method.
There is a stack-based buffer overflow in the K7Sentry.sys kernel mode driver, allowing local users to execute arbitrary code with kernel privileges.
The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.
A heap-based buffer overflow exists in the K7FWFilt.sys kernel mode driver, allowing local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call. This affects multiple K7 Computing products.
Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a symlink or hard link attack in an image archive during a pull or load operation.
The mdp_lut_hw_update function in the MDP display driver for Linux kernel 3.x does not validate certain start and length values within an ioctl call, allowing attackers to gain privileges via a crafted application.
The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives.
Stack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers to execute arbitrary code via a crafted column alias.
Integer overflow in Trihedral Engineering VTScada versions 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.