CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.
Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via various parameters, leading to creation of a new HelpBox user account and read, modify, or delete data from the backend database.
SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the sortdir or criteria parameter to ladder-log.asp or the memberid or teamid parameter to view-profile.asp.
A stack-based buffer overflow vulnerability in the swnet.dll library in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code by sending a long message parameter in a SendMsg action to action.htm.
The vulnerability in passwd version 0.68 is due to not checking the return code of the pam_start function. This may lead to unknown impacts and attacks that disrupt the safe and proper operation of PAM.
PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the base_dir parameter to reference a URL on a remote web server that contains phpshop.cfg.
A vulnerability in GnuTLS 1.0.16 allows remote attackers to cause a denial of service (CPU consumption) via X.509 certificates with long chains and signed with large RSA keys.
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) versions 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the 'table' and 'field' parameters in LinkClick.aspx.
Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart versions 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in shopreviewlist.asp and shopreviewadd.asp.
The Webmail, admin, and SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.
The password generation in Mailman before version 2.1.5 generates only 5 million unique passwords, making it easier for remote attackers to guess passwords via a brute force attack.
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.
The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.
A CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a crafted link or IMG tag to YaBB.pl with specified action, id, and moda parameters.
An unknown overflow in the phpgw_config table in phpGroupWare before version 0.9.14.002. An attacker could exploit this vulnerability, but the exact attack vectors and impact are unknown.
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
Vulnerability in Kerio Personal Firewall 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
A vulnerability in Microsoft Windows 2000, XP, and possibly 2003 allows local users with SeDebugPrivilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
An unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web management interface. The provenance of this information is unknown; details are obtained from third party reports.
The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates.