CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string.
Buffer overflow in HttpSaveCVP.dll and HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
CardBoard 2.4 is a CGI script for sending greeting cards that allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS versions 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
The SpeedXess HA-120 DSL router has a default administrative password of 'speedxess', allowing remote attackers to gain access.
Pathways Homecare 6.5 uses weak encryption for user names and passwords, allowing local users to gain privileges by recovering passwords from the pwhc.ini file.
The default 'basic' security setting in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges.
Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may lead to less restrictive permissions than intended.
NAI WebShield SMTP version 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.
Axis network cameras 2120, 2110, 2100, 200+, and 200 have a default administration password 'pass', allowing remote attackers to gain access to the camera.
Outlook Express 6.0, with the 'Do not allow attachments to be saved or opened that could potentially be a virus' option enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code.
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (-name and -T) arguments.
CVE-2001-1562 describes a format string vulnerability in nvi before version 1.79 that allows local users to gain privileges via format string specifiers in a filename.
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources.
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header.
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
The lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.