CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form.
Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long commands such as login.
Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 allows remote attackers to execute arbitrary code via a long movie parameter.
WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.
Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory.
Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long '220' banner.
FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) head or (2) foot parameters.
Version 3.3.03 and earlier of Snitz Forums 2000 contains a SQL injection vulnerability in members.asp, allowing remote attackers to execute arbitrary code.
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.
AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
pforum version 1.14 and earlier does not explicitly enable PHP magic quotes, allowing remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default.
Add2it Mailman Free version 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.
Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply.
Buffer overflows in mpg321 before 0.2.9 allow local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.
CVE-2002-0308 affects the admin.asp file in AdMentor 2.11, allowing remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.
Buffer overflow in Netwin WebNews CGI program 1.1 (Webnews.exe) allows remote attackers to execute arbitrary code via a long group argument.
In Avenger's News System (ANS) version 2.11 and earlier, the ans.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.
The GetPassword function in function.php of SiteNews versions 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password.
Outlook Express 5.5 and 6.0 on Windows treats a carriage return ('CR') in a message header as a valid carriage return/line feed combination (CR/LF). This could allow remote attackers to bypass virus protection and other filtering mechanisms via a mail message with headers that only contain the CR, causing Outlook to create separate headers.
Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. (dot dot) in the list parameter.