CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow vulnerability in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
A buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol.
SQL injection vulnerability in mod_forum/read_message.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to 'Forum-read_mess'. This is a different vulnerability than CVE-2005-1701.
Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services (.ks) script, which can reference functions from libraries that are used by that script.
Buffer overflow vulnerability in the rdb_query function in Denora IRC Stats 1.0 may allow attackers to execute arbitrary code.
Vulnerability in Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Users/AddModifyInput.php.
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port 6070 or 6050.
The pstopnm tool in netpbm improperly uses the "-dSAFER" option when calling Ghostscript to convert a PostScript file into PBM, PGM, or PNM formats. This allows external user-assisted attackers to execute arbitrary commands.
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via various parameters in multiple PHP scripts.
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel.
Unknown vulnerability in apt-cacher in Debian 3.1, related to 'missing input sanitising,' allows remote attackers to execute arbitrary commands on the caching server.
SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.
SQL injection vulnerability in login.asp of Thomson Web Skill Vantage Manager. Remote attacker can execute arbitrary SQL commands via the svmPassword parameter.
Multiple SQL injection vulnerabilities in Contrexx before version 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 'value' parameter in the poll module or the 'pId' parameter in the gallery module.
B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request to firmwarecfg.
The Gopher client version 3.0.5 contains a vulnerability in gopher.c that improperly creates temporary files, allowing local users to escalate privileges.
Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute arbitrary SQL commands via the webtag parameter.
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the 'id' argument to admin pages such as 'members' or 'admin'.
Stack-based buffer overflow in Ares FileShare 1.1 allows remote or local attackers to execute arbitrary code via a long history parameter in the configuration file (ares.conf) or a long search string.