CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The RIPng parser in tcpdump before version 4.9.2 has a buffer over-read in the ripng_print() function.
The BGP parser in tcpdump before version 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
The ISAKMP parser in tcpdump before version 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c in several functions.
The telnet parser in tcpdump before version 4.9.2 has a buffer over-read in the telnet_parse() function.
The IEEE 802.11 parser in tcpdump before version 4.9.2 has a buffer over-read in the parse_elements() function.
The IPv6 routing header parser in tcpdump before version 4.9.2 has a buffer over-read in the rt6_print() function.
The IPv6 parser in tcpdump before version 4.9.2 has a buffer over-read in the ip6_print() function.
The Zephyr parser in tcpdump before version 4.9.2 has a buffer over-read in print-zephyr.c in several functions.
The EIGRP parser in tcpdump before version 4.9.2 has a buffer over-read in the eigrp_print() function.
Several protocol parsers in tcpdump before version 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().
The DECnet parser in tcpdump before version 4.9.2 has a buffer over-read in the decnet_print() function.
The NFS parser in tcpdump before version 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
The ISO CLNS parser in tcpdump before version 4.9.2 has a buffer over-read in the isoclns_print() function.
The ISAKMP parser in tcpdump before version 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
The ICMP parser in tcpdump before version 4.9.2 has a buffer over-read issue in the icmp_print() function.
Several protocol parsers in tcpdump before version 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().
The SMB/CIFS parser in tcpdump before version 4.9.2 has a buffer over-read in smbutil.c:name_len().
A vulnerability in the TURN server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthorized access to components or sensitive information in an affected system. The issue is due to an incorrect default configuration of the TURN server, which could expose internal interfaces and ports.
The DHCP client on D-Link DIR-850L REV. A and REV. B devices allows unauthenticated remote code execution as root due to mishandling of shell metacharacters in /etc/services/INET/inet_ipv4.php.
D-Link DIR-850L REV. B devices (with firmware through FW208WWb02) have a hardcoded password for the Alphanetworks account, allowing remote attackers to gain root access via a TELNET session upon device reset.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS