CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in HP OpenView Network Node Manager versions 6.2 through 7.50 allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the node, cdpView, freeIPaddrs, or ecscmg parameters in .ovpl scripts.
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly leading to a buffer overflow.
The smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs. This allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process.
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served but not directly reachable, leading to code execution or source code disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS