CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The GRE parser in tcpdump before version 4.9.0 has a buffer overflow in print-gre.c in multiple functions.
The ZeroMQ parser in tcpdump before version 4.9.0 has an integer overflow in the zmtp1_print_frame() function.
The VAT parser in tcpdump before version 4.9.0 has a buffer overflow in the vat_print() function in print-udp.c.
The UDP parser in tcpdump before version 4.9.0 has a buffer overflow in the udp_print() function.
The RTP parser in tcpdump before version 4.9.0 has a buffer overflow in the rtp_print() function in print-udp.c.
The RTCP parser in tcpdump before version 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().
The PPP parser in tcpdump before version 4.9.0 has a buffer overflow in the ppp_hdlc_if_print() function.
The PIM parser in tcpdump before version 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
The MPLS parser in tcpdump before version 4.9.0 has a buffer overflow in the mpls_print() function in print-mpls.c.
The LLC/SNAP parser in tcpdump before version 4.9.0 has a buffer overflow in the llc_print() function in print-llc.c.
The PPPoE ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the juniper_parse_header() function.
The IPComp parser in tcpdump before version 4.9.0 has a buffer overflow in the ipcomp_print() function in print-ipcomp.c.
The IEEE 802.11 parser in tcpdump before version 4.9.0 has a buffer overflow in the ieee802_11_radio_print() function.
The Ethernet parser in tcpdump before version 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
The compressed SLIP parser in tcpdump before version 4.9.0 has a buffer overflow in the sl_if_print() function in print-sl.c.
The ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the function print-atm.c:oam_print().
The ARP parser in tcpdump before version 4.9.0 has a buffer overflow in the arp_print() function in print-arp.c.
The AH parser in tcpdump before version 4.9.0 has a buffer overflow in the ah_print() function in print-ah.c.
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Affected versions include 8.2, 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2.
Vulnerability in the OJVM component of Oracle Database Server, affecting versions 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows a low privileged attacker to compromise OJVM with required human interaction from a person other than the attacker.