CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple buffer overflows in Lotus Domino Web Server before version 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code. The attack can be carried out through various options in the PresetFields parameter and a long Host header.
Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via close_tunnel and open_tunnel.
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a 'isc_init1.X' temporary file.
Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.
The prescan() function in the address parser in Sendmail before version 8.12.9 does not properly handle conversions from char and int types, which can lead to a length check being disabled. This allows attackers to cause a denial of service and potentially execute arbitrary code via a buffer overflow attack.
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder.
In versions 0.5.0 and earlier of the Null HTTP Server, a heap-based buffer overflow allows remote attackers to execute arbitrary code by providing a negative value in the Content-Length HTTP header.
Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allow remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code. Attacks can be carried out through various long messages or responses from the server.
Integer signedness error in the emalloc() function for PHP before version 4.3.2 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as socket_recv and socket_recvfrom.
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code. The attack can be carried out via multiple vectors, including the InitializeUsingNotesUserName method in the iNotes ActiveX control.
A stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.
The kernel module loader in Linux kernel 2.2.x before 2.2.25 and 2.4.x before 2.4.21 allows local users to gain root privileges by using ptrace to attach to a child process spawned by the kernel.
A buffer overflow in the SMB/CIFS packet fragment re-assembly code for the Samba daemon (smbd) before version 2.2.8 and Samba-TNG before version 0.3.1 allows remote attackers to execute arbitrary code.
Multiple vulnerabilities in NetPBM 9.20 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via maths overflow errors, such as integer signedness errors or integer overflows, leading to buffer overflows.
CVE-2002-1553 affects Cisco ONS15454 and ONS15327 devices running ONS versions prior to 3.4. It allows remote attackers to modify system configuration and delete files by establishing an FTP connection to TCC, TCC+, or XTC using a non-existent username and password.
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
Novell eDirectory version 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.
The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled.
Buffer overflow in Light HTTPd (lhttpd) version 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3 and OpenBSD 3.2 and earlier allows local users to gain root privileges via long command line arguments such as request ID or user name.