CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple cross-site scripting vulnerabilities were found in the Search module of Php-Nuke in index.php. A remote attacker can inject arbitrary web script or HTML via the sid, max, sel1-5, match, mod1-3 parameters.
Vulnerability in Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the 'page' parameter.
Vulnerability in Sun Java System Portal Server 6.2 allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
The vulnerability in Safari 1.2.2 allows a frame from one domain to inject content into a frame belonging to another domain. This issue, known as the frame injection vulnerability, can be exploited for website spoofing and other attacks.
Konqueror versions 3.1.3, 3.2.2, and possibly others do not properly prevent a frame in one domain from injecting content into a frame belonging to another domain, enabling web site spoofing and other attacks, known as the frame injection vulnerability.
Buffer overflow in Medal of Honor: Allied Assault 1.11v9 and earlier, Breakthrough 2.40b and earlier, and Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as the getinfo query, the connect packet, and other unknown vectors.
The vulnerability in Internet Explorer for Mac 5.2.3 and Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain. This facilitates web site spoofing and other attacks, known as the frame injection vulnerability.
A format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers directly provided to the OutputDebugString function call.
A double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause an application crash via a malformed GIF image.
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter.
Integer overflow in the ip_setsockopt function in Linux kernel versions 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
In Subversion versions 1.0.2 and earlier, a stack-based buffer overflow during apr_time_t data conversion allows remote attackers to execute arbitrary code.
Unknown vulnerability in libtasn1 in versions 0.1.x before 0.1.2 and 0.2.x before 0.2.7, related to DER parsing functions.
Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to execute arbitrary code via the ProxyCommand option or conduct port forwarding via the -R option.
Buffer overflow vulnerability in the ISAKMP functionality of Check Point VPN-1 and FireWall-1 NG products prior to versions R55 HFA-03, R54 HFA-410, NG FP3 HFA-325, and VPN-1 SecuRemote/SecureClient R56. A remote attacker can exploit this flaw to execute arbitrary code during VPN tunnel negotiation.
Vulnerability in BEA WebLogic Server and WebLogic Express versions 7.0 through SP5 and 8.1 through SP2. When editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, if the weblogic.xml does not have a principal-name tag, the security-role-assignment tags are inadvertently removed. This can remove intended access restrictions for the associated web application.
Vulnerability in HelpViewer on Mac OS X 10.3.3 and 10.2.8 allows arbitrary code execution by processing scripts that were not initiated by the user. The issue was originally reported as a directory traversal vulnerability in Safari using the runscript parameter in a help: URI handler.
A stack-based buffer overflow exists in Exim 3.35 and earlier versions when the sender_verify option is true. This allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter '-' characters that begin a hostname in telnet, rlogin, ssh, or mailto URIs. This allows remote attackers to manipulate the options passed to associated programs, potentially leading to reading arbitrary files or executing arbitrary code.