CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W libsixel w wersji 1.8.2 odkryto problem związany z przepełnieniem całkowitym w funkcji sixel_decode_raw_impl w pliku fromsixel.c.
W wersji 1.8.2 biblioteki libsixel odkryto problem związany z przepełnieniem całkowitym w funkcji sixel_encode_body w pliku tosixel.c.
W wersji 1.8.2 biblioteki libsixel odkryto problem związany z przepełnieniem bufora w stercie w funkcji sixel_decode_raw_impl w pliku fromsixel.c.
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
Vulnerability in class.upload.php (versions before 1.0.3 and 2.x before 2.0.4) omits .phar from the list of dangerous file extensions. This library is used in the K2 extension for Joomla! and other products.
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters in the ping function.
Versions of Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, and 13.0.197.13 and below have incorrect access control.
In GNU libidn2 before 2.1.1, the idn2_to_ascii_4i function in lib/lookup.c has a heap-based buffer overflow. The vulnerability is triggered by a long domain string.
Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. The flaw enables bypassing directory restrictions and executing arbitrary commands.
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, an attacker can find an RMI service endpoint to access and make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.
A polymorphic typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When default typing is enabled for an externally exposed JSON endpoint and the commons-dbcp (1.4) jar is in the classpath, an attacker who can find an RMI service endpoint may make the service execute a malicious payload. This exists because of mishandling in org.apache.commons.dbcp.datasources.SharedPoolDataSource and PerUserPoolDataSource.
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.
Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS