CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures.
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
Buffer overflow in RealJukebox 2 and RealOne Player Gold allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument.
MyHelpDesk 20020509 and possibly other versions have cross-site scripting vulnerabilities that allow remote attackers to execute scripts as other users. The attack can be carried out through parameters such as Title or Description when a new ticket is created by a support assistant.
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.
CVE-2002-0925 describes a format string vulnerability in the mmsyslog function that allows remote attackers to execute arbitrary code. This vulnerability affects mmmail version 0.0.13 and earlier, as well as mmftpd version 0.0.7 and earlier.
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
CVE-2002-0916 describes a format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, distributed in Squid 2.4.STABLE6 and earlier. This allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call.
Buffer overflows in the netstd 3.07-17 package allow remote DNS servers to execute arbitrary code via a long FQDN reply. This issue has been observed in utilities such as linux-ftpd, pcnfsd, tftp, traceroute, and from/to.
Multiple buffer overflows in mnews 1.22 and earlier allow a remote NNTP server to execute arbitrary code or local users to gain privileges via long command line arguments or environment variables.
CVE-2002-0913 describes a format string vulnerability in the log_doit function of Slurp NNTP client 1.1.0, allowing a malicious news server to execute arbitrary code on the client via format strings in a server response.
Buffer overflow in Sendmail before version 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
The SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.
The register.php file in WoltLab Burning Board (wbboard) 1.1.1 uses a limited number of random values for the 'code' parameter, allowing remote attackers to hijack new user accounts via a brute force attack.
phpBB 2.0.0 has a cross-site scripting vulnerability that allows remote attackers to execute Javascript as other phpBB users by injecting malicious code in the [IMG] tag using a http:// address and a double quote.
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs such as amcheck, amgetidx, amtrmidx, createindex-dump, or createindex-gnutar.
Falcon web server version 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a dot.
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier allows remote attackers to execute arbitrary code via a long database name parameter.