CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command. This is a different vulnerability than CVE-2006-1010.
In DSDownload 1.0, with magic_quotes_gpc disabled, the 'key' and 'category' parameters in search.php and downloads.php are vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands.
SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands via the search parameter. The details are obtained solely from third party information.
An unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 through 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. Due to the lack of specific information in the vendor advisory, it is unclear how this vulnerability differs from CVE-2006-0397 and CVE-2006-0398.
A vulnerability in CoreTypes in Apple Mac OS X 10.4 through 10.4.5 allows remote attackers to bypass the same-origin policy and execute JavaScript in other domains via crafted archives.
An unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 through 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. Due to the lack of specific information in the vendor advisory, it is unclear how this CVE differs from CVE-2006-0398 and CVE-2006-0399.
An unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 through 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. Due to lack of details in the vendor advisory, it is unclear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 differ.
SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in results.php, topolls.php, and pollit.php.
A race condition in the add_key, request_key, and keyctl functions of the Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time the kernel calculates the length and when it copies the data into kernel memory.
PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier. An attacker can remotely include and execute arbitrary PHP code by providing a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php.
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the 'ns' database account. This allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions.
An unspecified vulnerability in index.php of CoreNews 2.0.1 may allow remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include issue. However, this could not be confirmed by source code inspection.
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
The web interface of IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores the MySQL database username and password in cleartext in the body.phtml file. A remote attacker can read the source code and gain access to the database.
A direct static code injection vulnerability in add_link.txt of daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name parameter, which is not sanitized before being stored in links.txt and later used in an include statement.
Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file with a .php.li extension, which is then accessible from the upload directory.
The vulnerability in the SafeDisc driver (secdrv.sys) involves installing the service with insecure permissions, allowing a local user to change the configuration to reference a malicious program and escalate privileges.
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files by adding dot, space, slash, or NULL characters in the filename extension of an HTTP request.
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat) and leaves it with world-readable permissions, allowing local users to gain privileges.
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control. A remote attacker can obtain usernames and password hashes by directly accessing list.gtdat.