CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12, 0666 permissions are used for the UNIX socket, allowing local users to gain privileges via a crafted FastCGI client.
F5 BIG-IQ Cloud and Security versions 4.0.0 through 4.1.0 allow remote authenticated users to change the passwords of arbitrary users via the 'name' parameter in a request to the user's page in mgmt/shared/authz/users/.
CVE-2013-7375 is an SQL injection vulnerability in Authenticate.class.php in PHP-Fusion versions 7.02.01 through 7.02.05. It allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie.
The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before version 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.
Multiple SQL injection vulnerabilities in PHP-Fusion before version 7.02.06 allow remote attackers to execute arbitrary SQL commands. Attackers can exploit various parameters in files such as downloads.php, forum/postedit.php, forum/postnewthread.php, and administration/settings_messages.php.
The TCP reassembly function in the inet module in FreeBSD before versions 8.3 p16, 8.4 p9, 9.1 p12, 9.2 p5, and 10.0 p2 allows remote attackers to cause a denial of service (undefined memory access and system crash) or possibly read system memory via multiple crafted packets.
The string_utf_support.rb library in the Arabic Prawn 0.0.1 gem for Ruby has a vulnerability that allows remote attackers to execute arbitrary commands via shell metacharacters in the downloaded_file or url variables.
In Unitrends Enterprise Backup 7.3.0, a vulnerability allows remote attackers to bypass authentication by setting the auth parameter to a certain string.
Cisco TelePresence TC Software versions 4.x and 5.x and TE Software versions 4.x and 6.0 are vulnerable to an attack that can lead to denial of service through memory consumption. Attackers can exploit specially crafted H.225 packets, associated with Bug ID CSCtq78849.
Cisco TelePresence TC Software versions 4.x and 5.x and TE Software versions 4.x and 6.0 do not properly restrict access to the serial port, allowing local users to gain privileges via unspecified commands.
A heap-based buffer overflow in Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 and TE Software versions 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets.
Cisco TelePresence TC Software versions 4.x and 5.x before 5.1.7 and 6.x before 6.0.1, as well as TE Software versions 4.x and 6.0, allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell scripts.
Cisco TelePresence TC Software versions 4.x through 6.x before 6.2.0 and TE Software versions 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts.
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.