CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
phpMyAdmin versions 2.6.0-pl2 and earlier before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters.
Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD document containing format string specifiers in title or baseurl fields.
Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.
Vulnerability in a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
A buffer overflow vulnerability in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long password field in a join request.
Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename.
Buffer overflow vulnerability in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a specially crafted text file that is converted to TIFF format.
Multiple buffer overflows in the handle_directive function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute arbitrary code via crafted ABC files.
Buffer overflow in the bsb_open_header function in libbsb for bsb2ppm 0.0.6 allows remote attackers to execute arbitrary code via crafted BSB pictures.
Buffer overflow in the remove_quote function in convert.c for html2hdml 1.0.3 allows remote attackers to execute arbitrary code via a crafted HTML file.
A buffer overflow in the parse_emelody function in parse_emelody.c of ringtonetools 2.22 allows remote attackers to execute arbitrary code via a crafted eMelody file.
Buffer overflow vulnerability in the parse function in vb2c.c of vb2c 0.02 allows remote attackers to execute arbitrary code via a crafted FRM file.
Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c.
Stack-based buffer overflow in Cyrus IMAP Server versions 2.2.4 through 2.2.8 with the imapmagicplus option enabled. A remote attacker can execute arbitrary code by sending a long PROXY or LOGIN command.
A buffer overflow vulnerability in the C2S module of the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.
The vulnerability in the LSASS (Local Security Authority Subsystem Service) on Windows 2000 Server and Windows Server 2003 is due to improper validation of connection information. This allows a local user to elevate privileges by running a specially crafted program.
The vulnerability in the argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via specially crafted commands such as "body[p", "binary[p", or "binary[p", which cause an index increment error leading to out-of-bounds memory corruption.
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the 'DHCP Request Vulnerability.'