CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Ethernet parser in tcpdump before version 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
The compressed SLIP parser in tcpdump before version 4.9.0 has a buffer overflow in the sl_if_print() function in print-sl.c.
The ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the function print-atm.c:oam_print().
The ARP parser in tcpdump before version 4.9.0 has a buffer overflow in the arp_print() function in print-arp.c.
The AH parser in tcpdump before version 4.9.0 has a buffer overflow in the ah_print() function in print-ah.c.
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Affected versions include 8.2, 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2.
Vulnerability in the OJVM component of Oracle Database Server, affecting versions 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows a low privileged attacker to compromise OJVM with required human interaction from a person other than the attacker.
Vulnerability in the Java SE and Java SE Embedded component of Oracle Java SE that allows an unauthenticated attacker with network access to compromise these systems. Successful attacks require human interaction, and their impact may significantly affect additional products.
Vulnerability in the Java SE and Java SE Embedded components allows an unauthenticated attacker with network access to compromise these systems. It requires user interaction, making the attack easy to execute.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Affected versions are 8.5.2 and 8.5.3.
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to compromise the server. Affected versions are 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1.
A vulnerability in the Java SE, Java SE Embedded, and JRockit components allows an unauthenticated attacker with network access to compromise these systems. The attacker can exploit this vulnerability by supplying data to APIs without using untrusted Java Web Start applications or untrusted Java applets.
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that exceeds the initialized buffer.
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause application crashes.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Attackers can create, delete, or modify critical data.
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to compromise the server. Attacks may significantly impact additional products, potentially resulting in takeover of the Oracle GlassFish Server.
A buffer overflow vulnerability exists while processing QMI QOS TLVs in Android. It affects versions that include the qmi_qos_srvc.c file.
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow, resulting in remote code execution.
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow, resulting in remote code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS