CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A format string vulnerability in the SSL_set_verify function in telnetd.c of the SSLtelnet daemon (SSLtelnetd) version 0.13 allows remote attackers to execute arbitrary code.
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) 'c' compress option or (2) 'd' decompress option.
An unknown vulnerability in Linux before version 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.
The vulnerability in the acpRunner ActiveX control version 1.2.5.0 allows a remote attacker to execute arbitrary code via the DownLoadURL, SaveFilePath, and Download methods. The attack can be carried out through a crafted web page.
Buffer overflow in the chpasswd command in the Change_passwd plugin before version 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.
Buffer overflow vulnerability in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11. A remote attacker can send a request with a small fragment length and a large amount of data, leading to arbitrary code execution.
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
Utility Manager in Windows 2000 launches winhlp32.exe with raised privileges, allowing local users to gain system privileges via a 'Shatter' style attack. This attack sends a Windows message to cause Utility Manager to launch winhlp32, bypassing the GUI.
A format string vulnerability in the printlog function in log2mail before version 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly leading to a buffer overflow.
CVS versions 1.12.x through 1.12.8 and 1.11.x through 1.11.16 do not properly handle malformed 'Entry' lines. This may lead to a NULL terminator not being used, resulting in a denial of service (crash), modification of critical program data, or arbitrary code execution.
CVS versions from 1.11.x to 1.11.16 and from 1.12.x to 1.12.8 improperly handle empty data lines, which may allow remote attackers to perform an out-of-bounds write. This can lead to arbitrary code execution or modification of critical program data.
A vulnerability in the 'memory dump' command in the VICE emulator versions 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and potentially execute arbitrary code via format string specifiers in an output string.
A stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0 allows local or remote attackers to execute arbitrary code via a .job file containing long parameters.
Buffer overflow vulnerability in the wvHandleDateTimePicture function of the wv library (wvWare) versions 0.7.4 through 0.7.6 and 1.0.0. An attacker can remotely execute arbitrary code by sending a document with a long DateTime field.
The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory.
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10 allows remote attackers to read and delete arbitrary files via '..' sequences in the dynamicimag argument to crystalimagehandler.aspx.
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of svn protocol URLs, allowing remote attackers to cause a denial of service through a heap-based buffer overflow.