CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple vulnerabilities in fliccd, installed setuid root as part of the kdeedu Kstars support for INDI in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.
The Hyperlink Object Library in Windows 98, 2000, XP, and Server 2003 contains a buffer overflow that can be exploited by a remote attacker to execute arbitrary code via a crafted link.
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow remote attackers to execute arbitrary code via a modified computer name and length leading to a heap-based buffer overflow, or local users to execute arbitrary code via a long Name entry in the configure.cfg file.
In PHP before version 4.3.11, an integer overflow in the exif_process_IFD_TAG function in exif.c may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.
A format string vulnerability in Xpand Rally version 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a message.
The vulnerability in ncpfs before version 2.2.6 is that the nwclient.c file does not drop root privileges before executing utilities using the NetWare client functions. This allows local users to escalate their privileges.
Vulnerability in WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to ajout_admin2.php or suppr.php.
Vulnerability in ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel. The attack is possible via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.
A vulnerability in Secure Shell (SSH) 2 in Cisco IOS versions 12.0 through 12.3 allows a remote attacker to cause a denial of service (device reload) through three different scenarios: using a username containing a domain name when authenticating via a TACACS+ server, sending a send command by a logged-in user during the login phase of a new SSH session, or terminating an SSH session while the server is sending data with IOS logging messages.
Vulnerability in cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php.
The vulnerability allows remote code execution via PHP file inclusion by manipulating the 'view' parameter in index.php of AlstraSoft EPay Pro 2.0. An attacker can modify this parameter to point to a URL containing malicious code, which will be executed on the server.
The vulnerability in Mac OS X 10.3.9 and earlier allows users to install, create, and execute scripts with setuid/setgid bits set, contrary to the intended design. This may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.
Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via the Category or resultCnt parameters to advSearch_h.asp, and possibly the offset parameter to tarinasworld_butterflyjournal.asp.
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.
The vulnerability in Squid 2.5 involves incorrect processing of empty Access Control Lists (ACLs) during configuration file parsing, particularly proxy_auth ACLs without defined auth schemes, which effectively removes arguments and could allow remote attackers to bypass intended ACLs if the administrator ignores parser warnings.
SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.
SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter in init.inc.php or zipdownload.php.
Multiple heap-based buffer overflows in xine-lib before version 1.0 and products using it (e.g., MPlayer 1.0pre6 and earlier) in code handling MMS over TCP (MMST) and RealMedia RTSP streams. A remote malicious server can exploit these to execute arbitrary code.
SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode parameter.