CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
Local users can cause a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
The rsync command before version 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
Talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
64-bit Solaris 7 procfs allows local users to perform a denial of service.
IMail POP3 daemon uses weak encryption, allowing local users to read files.
The syslogd service in Solaris crashes when receiving a message from a host that does not have an inverse DNS entry.
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
CVE-1999-0483 vulnerability affects OpenBSD, which can crash due to the use of nlink value in FFS and EXT2FS filesystems.
Buffer overflow in the OpenBSD ping tool may lead to unauthorized access or system crashes.
Buffer overflow in the Linux autofs module due to long directory names allows local users to perform a denial of service attack.
Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
The xtvscreen program in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
The cfengine package in Debian GNU/Linux is susceptible to a symlink attack.
Vulnerability in the edauth command of Compaq Tru64 UNIX may allow unauthorized users to gain access to the system.
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted after installation.
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS