CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow vulnerability in the SCTP implementation in the Linux kernel before version 2.6.16.17 allows a remote attacker to cause a system crash (denial of service) and potentially execute arbitrary code by sending a crafted HB-ACK chunk.
A buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown attack vectors.
SQL injection vulnerability in default.asp of CodeAvalanche News (CANews) 1.2. Allows remote attackers to execute arbitrary SQL commands via the password field.
A CSRF vulnerability in Serendipity before version 1.0-beta3 allows remote attackers to perform unauthorized actions on behalf of a logged-in user via a crafted link or IMG tag.
A buffer overflow vulnerability exists in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, and Microsoft Works Suites through 2006. This allows user-assisted attackers to execute arbitrary code via a malformed object pointer.
In Linux kernels 2.6.16 and earlier, the readv and writev functions lack the appropriate LSM (Linux Security Modules) file_permission hooks, potentially allowing bypass of intended access restrictions.
ScozNews 1.2.1 and earlier contain multiple PHP remote file inclusion vulnerabilities via the CONFIG[main_path] parameter. An attacker can execute arbitrary PHP code by providing a malicious URL in this parameter in several script files.
An integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 occurs when handling the Content-Length HTTP header. Remote attackers can exploit this to cause a denial of service (crash) and potentially execute arbitrary code.
PHP remote file inclusion vulnerability in Quezza 1.0 and earlier, and possibly 1.1.0, via the quezza_root_path parameter in includes/class_template.php. An attacker can remotely execute arbitrary PHP code.
Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server before 5.00.035. Remote attackers can cause denial of service or execute arbitrary code via malformed packets.
SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier. Remote attackers can execute arbitrary SQL commands via the artnum parameter.
In Cosmoshop 8.11.106 and earlier, the edit_mailtexte.cgi and bestmail.cgi scripts are vulnerable to directory traversal. A remote administrator can read arbitrary files on the server using ".." sequences in the file parameter.
An unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly. This could allow attackers to bypass intended security policies.
In BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7, HTTP handlers store usernames and passwords in cleartext in the server log when access to a web application or protected JWS fails. This allows attackers to gain privileges.
A heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 may allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.
A directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files by using an encoded drive letter (C:%5C) in a URL.
IBM WebSphere Application Server versions 5.0.2 and 5.1.1, as well as earlier cumulative fixes, allow unauthorized EJB access on Solaris systems via a crafted LTPA token.
The vulnerability in freshclam in ClamAV 0.88 and ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, allowing local users to read portions of arbitrary files when an error message displays the first line of the target file.
DUbanner 3.1 contains a vulnerability in add.asp that allows remote attackers to upload files with arbitrary extensions, including ASP, potentially leading to arbitrary code execution on the server. Client-side restrictions can be easily bypassed.
A stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long SSH_MSG_KEXINIT messages, which may overflow when logged.