CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2003-1178 describes an eval injection vulnerability in comments.php in Advanced Poll 2.0.2 that allows remote attackers to execute arbitrary PHP code via the (1) id, (2) template_set, or (3) action parameter.
MAILsweeper for SMTP version 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants.
The SIP implementation in Ingate Firewall and Ingate SIParator before version 3.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.
Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) version 1.2 allows remote attackers to execute arbitrary code via unknown vectors.
Unknown vulnerability in the Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3.41, related to a memory allocation problem, has unknown impact.
An unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service and possibly gain privileges via certain constructs in a .forward file.
Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.
CVE-2003-1533 describes an SQL injection vulnerability in accesscontrol.php in PhpPass 2 that allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.
RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks.
Buffer overflow in the stmkfont utility of HP-UX from version 10.0 to 11.22 allows local users to gain privileges via a long command line argument.
Bastille B.02.00.00 on HP-UX 11.00 and 11.11 improperly configures the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.
In the default configuration of Majordomo 2.0 through 1.94.4, the which_access variable is set to 'open', allowing remote attackers to identify the email addresses of mailing list members via a 'which' command.
Buffer overflow in ISMail 1.4.3 and earlier allows remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.
Buffer overflow in Opera versions 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.
Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.
RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase.
Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.
PHP remote file inclusion vulnerability in hit.php for Kietu versions 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter.
foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function.
D-Forum versions 1.00 to 1.11 have a PHP remote file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via a crafted URL in the my_header or my_footer parameters.