CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A heap-based buffer overflow in Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 and TE Software versions 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets.
Cisco TelePresence TC Software versions 4.x and 5.x before 5.1.7 and 6.x before 6.0.1, as well as TE Software versions 4.x and 6.0, allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell scripts.
Cisco TelePresence TC Software versions 4.x through 6.x before 6.2.0 and TE Software versions 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts.
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service by sending crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets.
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 is vulnerable to remote attacks that can lead to denial of service by sending crafted packets.
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 is vulnerable to remote attacks that can lead to denial of service by sending crafted packets.
The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 is vulnerable to remote attacks that can lead to denial of service by sending crafted packets.
Cisco TelePresence System MXP Series Software before F9.3.1 is vulnerable to an attack that can lead to denial of service by sending crafted SIP packets.
Cisco TelePresence System MXP Series Software before F9.3.1 is vulnerable to an attack that can lead to denial of service by sending crafted SIP packets.
Cisco TelePresence System MXP Series Software before F9.3.1 is vulnerable to an attack that can lead to denial of service by sending crafted SIP packets.
Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17, related to certificate validation.
Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler ADC and NetScaler Gateway before version 9.3-66.5 and 10.x before version 10.1-122.17.
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
In version 3.30.0 of Super, the super.c file does not check the return value of the setuid function when the -F flag is set. This allows local users to gain privileges via unspecified vectors, known as an RLIMIT_NPROC attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS