CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter '-' characters that begin a hostname in telnet, rlogin, ssh, or mailto URIs. This allows remote attackers to manipulate the options passed to associated programs, potentially leading to reading arbitrary files or executing arbitrary code.
Buffer overflow vulnerability in the ISAKMP functionality of Check Point VPN-1 and FireWall-1 NG products prior to versions R55 HFA-03, R54 HFA-410, NG FP3 HFA-325, and VPN-1 SecuRemote/SecureClient R56. A remote attacker can exploit this flaw to execute arbitrary code during VPN tunnel negotiation.
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002-2004, Norton Personal Firewall 2002-2004, Norton AntiSpam 2004, and Client Firewall and Client Security may allow remote attackers to cause a denial of service or execute arbitrary code.
The Windows Shell application in Windows 98, ME, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename.
Stack-based buffer overflow in the ssl_util_uuencode_binary function in Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the 'ESMUser' role to gain root access.
CVE-2004-0396 is a heap-based buffer overflow vulnerability in CVS versions 1.11.x up to 1.11.15 and 1.12.x up to 1.12.7 when using the pserver mechanism. It allows remote attackers to execute arbitrary code via Entry lines.
Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing '..' (dot dot) sequences and a filename that ends in '::' which is treated as a .chm file even if it does not have a .chm extension.
Integer overflow in imapparse.c for Cyrus IMAP server versions 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value, leading to a buffer overflow attack.
Buffer overflow in the zms script in ZoneMinder before version 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string.
McAfee ePolicy Orchestrator versions 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allow remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on TCP port 81.
An unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, allowing remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.
The Virtual DOS Machine (VDM) subsystem component in Windows NT 4.0 and Windows 2000 does not properly validate system structures, allowing local users to access protected kernel memory and execute arbitrary code.
There is a stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of Microsoft Windows, allowing remote attackers to execute arbitrary code.
CVE-2004-0385 involves a heap-based buffer overflow in the Web Cache listener of Oracle 9i Application Server, allowing remote attackers to execute arbitrary code via a long HTTP request method header.
Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code.
Cisco Wireless LAN Solution Engine (WLSE) versions 2.0 through 2.5 and Hosting Solution Engine (HSE) versions 1.7 through 1.7.3 have a hardcoded username and password. This allows remote attackers to add new users, modify existing users, and change configuration.
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor that points to protected memory.
Buffer overflow in the rendering for Windows Metafile (WMF) or Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.