CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The XRenderQueryFilters function in X.org libXrender before version 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.
Multiple buffer overflows in the XvQueryAdaptors and XvQueryEncodings functions in X.org libXrender before version 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.
The libXrandr library in versions before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by mishandling reply data.
Multiple integer overflows in X.org libXrandr before version 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.
Integer overflow in X.org libXfixes before version 5.0.3 on 32-bit platforms may allow remote X servers to gain privileges via a length value of INT_MAX, causing the client to stop reading data and get out of sync.
The XListFonts function in X.org libX11 before version 1.6.4 may allow remote X servers to gain privileges via vectors involving length fields, leading to out-of-bounds write operations.
The XGetImage function in X.org libX11 before version 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, leading to out-of-bounds read operations.
The XvQueryAdaptors and XvQueryEncodings functions in libXv before version 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication, consequently reading arbitrary files or possibly having unspecified other impact by leveraging a 'logic flaw' in the authentication process.
A heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 can be exploited by remote attackers. This may lead to denial of service (crash) or disclosure of sensitive information from heap memory.
Heap-based buffer overflow in PCRE versions 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression.
Buffer overflow in enhance.c in ImageMagick before version 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology.
Integer overflow in profile.c in ImageMagick before version 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via manipulation of the offset variable.
The DCM reader in ImageMagick before version 6.9.4-5 and 7.x before version 7.0.1-7 allows remote attackers to exploit the lack of validation of pixel values (red, green, blue), potentially leading to unspecified impact.
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.
The DCM reader in ImageMagick before version 6.9.4-5 and 7.x before version 7.0.1-7 allows remote attackers to leverage lack of NULL pointer checks, potentially leading to unspecified impact.
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.
An issue was discovered in phpMyAdmin related to improper stripping of the CSRF token from the return URL of the preference import action when the arg_separator is different from its default '&' value. This affects versions 4.6.x (prior to 4.6.5), 4.4.x (prior to 4.4.15.9), and 4.0.x (prior to 4.0.10.18).
An issue was discovered in phpMyAdmin due to a bug in serialized string parsing, allowing bypass of the protection offered by the PMA_safeUnserialize() function.