CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflows in the netstd 3.07-17 package allow remote DNS servers to execute arbitrary code via a long FQDN reply. This issue has been observed in utilities such as linux-ftpd, pcnfsd, tftp, traceroute, and from/to.
Multiple buffer overflows in mnews 1.22 and earlier allow a remote NNTP server to execute arbitrary code or local users to gain privileges via long command line arguments or environment variables.
CVE-2002-0913 describes a format string vulnerability in the log_doit function of Slurp NNTP client 1.1.0, allowing a malicious news server to execute arbitrary code on the client via format strings in a server response.
Buffer overflow in Sendmail before version 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
The SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.
The register.php file in WoltLab Burning Board (wbboard) 1.1.1 uses a limited number of random values for the 'code' parameter, allowing remote attackers to hijack new user accounts via a brute force attack.
phpBB 2.0.0 has a cross-site scripting vulnerability that allows remote attackers to execute Javascript as other phpBB users by injecting malicious code in the [IMG] tag using a http:// address and a double quote.
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs such as amcheck, amgetidx, amtrmidx, createindex-dump, or createindex-gnutar.
Falcon web server version 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a dot.
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.
Buffer overflow in Jabber plug-in for Gaim client before version 0.58 allows remote attackers to execute arbitrary code.
Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, allowing remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.
The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.
none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument.
HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
Buffer overflow in the PGP public key server before version 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument.
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the '/./' directory.
Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.