CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner.
Buffer overflow in gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).
The Gateway GS-400 server has a default root password of '0001n' that cannot be changed via the administrative interface, allowing attackers to gain root privileges.
The web handler for Perl 5.003 on Novell NetWare 5.1 and 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.
Unknown vulnerability in passwd for VVOS HP-UX 11.04, related to 'unexpected behavior'.
Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Buffer overflow in the openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.
Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.
Unknown vulnerability in the bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
Buffer overflow in the XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.
Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a 'isc_init1.X' temporary file.
Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via close_tunnel and open_tunnel.
The prescan() function in the address parser in Sendmail before version 8.12.9 does not properly handle conversions from char and int types, which can lead to a length check being disabled. This allows attackers to cause a denial of service and potentially execute arbitrary code via a buffer overflow attack.
SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.
Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users by modifying hidden form fields in the HTML page.
Multiple buffer overflows in Lotus Domino Web Server before version 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code. The attack can be carried out through various options in the PresetFields parameter and a long Host header.
In versions 0.5.0 and earlier of the Null HTTP Server, a heap-based buffer overflow allows remote attackers to execute arbitrary code by providing a negative value in the Content-Length HTTP header.
Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allow remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code. Attacks can be carried out through various long messages or responses from the server.