CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Finger redirection allows the use of 'finger bombs', which can lead to unauthorized access or disruption of system operations.
A version of rusers is running that exposes valid user information to any entity on the network.
CVE-1999-0171 vulnerability involves a denial of service (DoS) attack on the syslog system by sending a large number of superfluous messages.
IP traceroute is accessible from arbitrary hosts, which may lead to unauthorized tracking of network paths.
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
The vulnerability in dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
The fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files, potentially leading to root access.
The cpio program on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems uses a 0 umask when creating files with the -O (archive) or -F options, resulting in files being created with mode 0666.
The nettune program in HP-UX 10.01 and 10.00 is installed with setuid root permissions, allowing local users to modify critical networking configuration information, leading to denial of service.
Vulnerability in the union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands.
pcnfsd (also known as rpc.pcnfsd) allows local users to change file permissions or execute arbitrary commands through arguments in the RPC call.
The Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
Race condition in the Linux mailx command allows local users to read user files.
The vulnerability in the colorview program on Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
Permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device. This could be exploited by an attacker to monitor conversations happening near a machine with a microphone.
Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files.
The rexd service is running with weak authentication, which may allow an attacker to execute commands.
The Mail service on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, allowing local users to read the mail of other users.
Wykryto podatność w GNU elfutils 0.192, która dotyczy funkcji handle_dynamic_symtab w pliku readelf.c komponentu eu-read. Manipulacja prowadzi do dereferencji wskaźnika null.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS