CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c at line 353.
The libautotrace.a in AutoTrace version 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c at line 337.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c at line 18.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c at line 17.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c at line 16.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to 'cannot be represented in type int', which may lead to data processing errors.
The libautotrace.a in AutoTrace 0.31.1 has an issue with 'cannot be represented in type int', which may lead to data processing errors.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to the inability to represent a value in the int type, which may lead to data processing errors.
The libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner_gettoken function in input-pnm.c at line 458.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm function in input-pnm.c at line 391.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c at line 346.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_ascii function in input-pnm.c at line 303.
Directory traversal vulnerability in Zimbra Collaboration Suite (ZCS) before version 8.7.6 allows attackers to have unspecified impact via unknown vectors.
A service provided by Zimbra Collaboration Suite (ZCS) before version 8.7.6 fails to require needed privileges before performing a few requested operations.
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
In zlib version 1.2.8, the file inffast.c contains a vulnerability due to improper pointer arithmetic. This could allow context-dependent attackers to cause unspecified impacts.
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
A use-after-free vulnerability in Ghostscript 9.20 may allow remote attackers to execute arbitrary code via reference leaks in the .setdevice function.
Multiple unspecified vulnerabilities in Google Chrome before version 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
The Image Export plugin version 1.1 for WordPress has an absolute path traversal vulnerability that allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS