CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.
A vulnerability in centericq 4.20.0-r3 with peer-to-peer communications enabled allows remote attackers to cause a segmentation fault and crash by sending short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus.
SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before version 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the DateFrom or DateUntil parameters to forum.php.
A stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the select, create, delete, rename, subscribe, or unsubscribe commands.
In freeFTPd before version 1.0.9 with Logging enabled, a stack-based buffer overflow exists. A remote attacker can use a long USER command to cause a denial of service (application crash) and potentially execute arbitrary code.
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via long (1) MKD and (2) DELE commands.
The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and execute arbitrary code, a similar vulnerability to CVE-2005-3650.
Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin (RJS) file.
SQL injection vulnerability in download.php of PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.
Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in ForumTopicDetails.php and ForumReply.php.
The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.
SQL injection vulnerability in the WF-Downloads module 2.05 for XOOPS allows remote attackers to execute arbitrary SQL commands via the 'list' parameter in viewcat.php.
SQL injection vulnerability in the admin panel of ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field.
A stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via long verb arguments.
The IKEv1 implementation in the libike library in Sun Solaris 9 and 10 allows a remote attacker to cause a denial of service (in.iked crash) by sending crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Multiple unspecified vulnerabilities in the IKEv1 implementation in HP-UX, Jetdirect, and Tru64 UNIX allow remote attackers to cause a denial of service via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Multiple unspecified format string vulnerabilities in various IKEv1 implementations, discovered by the PROTOS ISAKMP Test Suite, allow attacks through unspecified vectors leading to unknown impacts. Due to lack of details in original sources, this candidate is likely to be rejected once vulnerable implementations are identified.
The IKEv1 implementation in Check Point products is vulnerable to a DoS attack via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Due to lack of details, it is unclear which specific CVE (CVE-2005-3666, CVE-2005-3667, or CVE-2005-3668) this issue applies to.
The IKEv1 implementation in Openswan 2 before 2.4.4 and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23 allows remote attackers to cause a denial of service via a crafted packet using 3DES with an invalid key length or unspecified inputs when Aggressive Mode is enabled and the PSK is known.
A heap-based buffer overflow in the Kaspersky Anti-Virus Engine, used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50, allows remote attackers to execute arbitrary code via a crafted CHM file.