CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code.
Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before version 4.0 allows remote attackers to execute arbitrary code via a long TS value.
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.
Microsoft Internet Explorer versions 5.01 and 5.5 allow remote attackers to execute scripts in the Local Computer zone via a URL referencing a local HTML resource file, a variant of 'Cross-Site Scripting in Local HTML Resource'.
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) version 2.0.6.15 and earlier allows remote attackers to execute arbitrary code via a long File parameter.
Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, allowing remote attackers to execute arbitrary code by injecting it into the error message and then referring to the error message file via a mhtml: URL.
Multiple buffer overflows in purity version 1-16 allow local users to gain privileges and modify high scores tables.
Konqueror in version 3.0.2 and earlier does not verify the Basic Constraints for intermediate CA-signed certificates, allowing remote attackers to spoof trusted site certificates via a man-in-the-middle attack.
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433.
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.
Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via a long server name field.
Buffer overflow in the SMB protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a system crash by sending an SMB_COM_TRANSACTION packet requesting NetShareEnum, NetServerEnum2, or NetServerEnum3.
Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.
Microsoft Internet Explorer versions 5.01, 5.5, and 6.0 allow remote attackers to spoof the source of a file in the File Download dialogue box, misleading users into thinking the file type is safe to download.
Multiple buffer overflows in HP Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via msgchk or .upd..loader.
Buffer overflow in mailcv in HP Tru64 UNIX (versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f) allows local users to gain elevated privileges.
Buffer overflow in the ps tool in HP Tru64 UNIX (versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f) allows local users to gain elevated privileges.