CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.07)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files, potentially leading to denial of service (disk consumption and process crash) via a crafted HTTP request.
Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON.
Integer overflow in the authenticate_post function in CGit before version 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, leading to a buffer overflow.
The gdImageRotateInterpolated function in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service via a large bgd_color argument to the imagerotate function.
CVE-2015-8617 describes a format string vulnerability in the zend_throw_or_error function in PHP 7.x before version 7.0.1. This allows remote attackers to execute arbitrary code via format string specifiers in a string misused as a class name, leading to incorrect error handling.
Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.
Fortinet FortiAnalyzer, FortiSwitch, FortiCache, and FortiOS have a hardcoded passphrase for the Fortimanager_Access account, allowing remote attackers to gain administrative access via an SSH session.
Integer overflow in the Kernel service in Advantech WebAccess before version 8.1 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted RPC request.
Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.
Multiple stack-based buffer overflows in Advantech WebAccess before version 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-0854 describes an unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in Advantech WebAccess before version 8.1. This allows remote attackers to write to files of arbitrary types via unspecified vectors.
The Admin portal in Cisco Identity Services Engine (ISE) versions 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors.
Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code.
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka 'Microsoft Edge Memory Corruption Vulnerability.'