CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple buffer overflows in Thomas Hauck's Jana Server versions 2.x through 2.2.1 and 1.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code.
Jana Server version 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in RETR or DELE commands to the POP3 server, which exceeds array limits and allows a buffer overflow attack.
SquirrelMail versions 1.2.7 and earlier have cross-site scripting vulnerabilities that allow remote attackers to execute scripts as other web users. Attacks can be conducted via addressbook.php, options.php, search.php, or help.php.
The CGI program MakeBook 2.2 in Scripts For Educators allows remote attackers to execute scripts as other visitors or execute server-side includes (SSI) as the web server via improperly filtered parameters (1) Name or (2) Email.
The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, making it easier for an attacker to decrypt the passwords using brute force techniques.
In globals.php in PHP Address before version 0.2f, with the allow_url_fopen and register_globals variables enabled, remote attackers can execute arbitrary PHP code via a URL in the LangCookie parameter.
Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before version 3.0.3C allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb.
Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.
Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.
The Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext.
Cross-site scripting vulnerability in DeepMetrix LiveStats versions 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via unfiltered (1) user-agent or (2) referrer data.
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures.
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
MyHelpDesk 20020509 and possibly other versions have cross-site scripting vulnerabilities that allow remote attackers to execute scripts as other users. The attack can be carried out through parameters such as Title or Description when a new ticket is created by a support assistant.
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.
CVE-2002-0925 describes a format string vulnerability in the mmsyslog function that allows remote attackers to execute arbitrary code. This vulnerability affects mmmail version 0.0.13 and earlier, as well as mmftpd version 0.0.7 and earlier.
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
Multiple buffer overflows in mnews 1.22 and earlier allow a remote NNTP server to execute arbitrary code or local users to gain privileges via long command line arguments or environment variables.