CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions.
Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.
Buffer overflow in gopher client for Microsoft Internet Explorer versions 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache.
The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that connects to an invalid local storage device.
The default configuration of the LPRng print spooler in Red Hat Linux 7.0 through 7.3 and Mandrake 8.1 and 8.2 accepts print jobs from arbitrary remote hosts.
The FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's 'FTP PORT' responses, allowing remote attackers to redirect FTP data connections to arbitrary ports, a variant of the 'FTP bounce' vulnerability.
Nortel CVX 1800 is installed with a default 'public' community string, allowing remote attackers to read usernames and passwords and modify the CVX configuration.
Buffer overflow in Tivoli Storage Manager (TSM) versions 3.1 through 5.1 for server and storage agents, and versions 4.2 and 5.1 for TSM Client Acceptor Service, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or 1581.
Aprelium Abyss Web Server before version 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, allowing local users with access to the file to gain privileges.
A cross-site scripting vulnerability in the mini-browser for Winamp versions 2.78 and 2.79 allows remote attackers to execute scripts via an ID3v1 or ID3v2 tag in an MP3 file.
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.
CVE-2002-0549 describes cross-site scripting vulnerabilities in Anthill that allow remote attackers to execute scripts as other Anthill users.
Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar.
The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone.
Buffer overflow in sshd in OpenSSH versions 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication.
The smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs. This allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process.
Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.
Buffer overflow in University of Washington imap server (uw-imapd) in versions imap-2001 and imap-2001a, as well as earlier versions, allows remote authenticated users to execute arbitrary code via a long BODY request.
Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of /, *, and .. characters.