CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The rpc.rquotad service is running, which may lead to unauthorized access to quota system information.
The rstat/rstatd service is running, which may lead to unauthorized access to system information.
Linux versions 2.1.132 and earlier allow local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, allowing local users to modify Word Perfect behavior by editing files in the working directory or to modify other users' files via a symlink attack.
Internet Explorer versions 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, known as frame spoofing.
KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, known as untrusted scripted paste.
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the 'Cross Frame Navigate' vulnerability.
Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases.
The dumpreg program in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, allowing local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key.
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
Linux version 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, allowing local users to cause a denial of service by sending SIGIO to processes that do not catch it.
The NIS finger vulnerability allows an attacker to conduct a denial of service by sending a large number of finger requests, resulting in a large number of NIS queries.
Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users.
A vulnerability in AIX 4.3 allows local users to create or modify files via a symlink attack in the acledit and aclput tools.
A vulnerability in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
The pkgtool package in Slackware Linux 3.4 allows a local attacker to read and write to arbitrary files via a symlink attack on the reply file.
The vulnerability in ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
The ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS