CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials. This makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, making it easier for remote attackers to bypass authentication via vectors related to the session ID.
The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce values instead of nonce and nc values, making it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. This is a different vulnerability than CVE-2011-1184.
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects. This is a different vulnerability than CVE-2012-3175.
Buffer overflow vulnerability in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue. A remote attacker can cause a denial of service via a crafted HTML document.
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Known as "Universal XSS (UXSS)," it was exploited in the wild in February 2012.
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
A vulnerability in the SSL protocol where, in certain configurations (including Microsoft Windows, Internet Explorer, Firefox, Chrome, Opera), data is encrypted using CBC mode with chained initialization vectors, allowing man-in-the-middle attackers to obtain plaintext HTTP headers. The BEAST attack uses a blockwise chosen-boundary attack (BCBA) on an HTTPS session combined with JavaScript code using WebSocket, Java URLConnection, or Silverlight WebClient APIs.
A cross-site request forgery (CSRF) vulnerability was found in Spacewalk Java site packages. A remote attacker can hijack the authentication of arbitrary users, leading to unauthorized actions such as disabling accounts, adding new accounts, or escalating privileges by granting administrator access.
A directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a '..' sequence in the file parameter to module.php, a different vector than CVE-2005-1439. This issue has been disputed by a reliable third party.
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (JBoss EAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for GET and POST methods, allowing remote attackers to send requests using other methods.
An unspecified vulnerability in BlazeDS 3.2 and earlier, used in LiveCycle, LiveCycle Data Services, Flex Data Services, and ColdFusion, allows remote attackers to obtain sensitive information via injected tags and external entity references in XML documents.
nginx 0.7.64 writes data to a log file without sanitizing non-printable characters. A remote attacker could send an HTTP request containing a terminal escape sequence, potentially modifying a window's title, executing arbitrary commands, or overwriting files.
The updatePosition function in libexpat (Expat 2.0.1) has a buffer over-read vulnerability. Crafted UTF-8 sequences in an XML document can cause an application crash.
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
The Sage extension before 1.3.10 and Sage++ extensions for Firefox contain a cross-site scripting (XSS) vulnerability. A remote attacker can inject arbitrary web script or HTML via a "<SCRIPT/=''SRC='" sequence in an RSS feed.
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including Title, Author, and Album. The overflow triggers in the tooltip display string if the sound card driver is disabled or incorrectly installed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS