CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple SQL injection vulnerabilities in models/gallery.php in the Youtube Gallery (com_youtubegallery) component versions 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) listid or (2) themeid parameter to index.php.
The WebMediaPlayerAndroid::load function in Google Chrome before version 36.0.1985.122 on Android does not properly handle redirects, allowing remote attackers to bypass the Same Origin Policy via a crafted website hosting a video stream.
The auto-format feature in the Request_Curl class in FuelPHP versions 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.
Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions and execute arbitrary code or cause a denial of service via an API call.
The CGI component in Cybozu Garoon versions 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before version 7.2 allows remote attackers to read arbitrary files via a crafted call.
The ChkCookie subroutine in an ActiveX control in Advantech WebAccess before version 7.2 allows remote attackers to read arbitrary files via a crafted call.
The upAdminPg.asp file in Advantech WebAccess before version 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
Multiple stack-based buffer overflows in Advantech WebAccess before version 7.2 allow remote attackers to execute arbitrary code via long strings in various parameters of ActiveX controls.
The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 allows remote attackers to execute arbitrary code via a crafted HTTP request.
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.
Unspecified vulnerability in Oracle Java SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
An unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS