CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.
SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
Vulnerability in inews or rnews for INN 2.2.3 and earlier, related to insecure open() calls.
wwwisis version 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.
Buffer overflow in newt.c of newt windowing library (libnewt) version 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt.
Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allow remote attackers to execute arbitrary code. These issues affect the address_match() function in mystring.c and other functions in tolist.c.
Buffer overflows in fpexec in mod_frontpage before version 1.6.1 may allow attackers to gain root privileges.
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.
The nslookup.pl CGI script version 1.0 for Linux Directory Penguin allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.
Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.
Ethereal versions 0.9.4 and earlier contain buffer overflow vulnerabilities that can be exploited by remote attackers to cause denial of service or execute arbitrary code.
Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument.
Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument.
The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted. This could remove an escape character from the query, making the application subject to SQL injection attacks.
Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
CVE-2002-0796 describes a format string vulnerability in the logging component of snmpdx for Solaris versions 5.6 through 8, allowing remote attackers to gain root privileges.
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.
CVE-2002-0756 is a cross-site scripting vulnerability in the authentication page for Webmin 0.96 and Usermin 0.90, allowing remote attackers to inject scripts into an error page.
CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.
Vulnerability in PureTLS before version 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions.