CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header.
Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
The lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.
ColdFusion 4.5 and 5 on Windows with the advanced security sandbox type set to 'operating system' does not properly pass security context to child processes. This allows attackers to execute programs with the permissions of the System account.
Outlook Express 6.0, with the 'Do not allow attachments to be saved or opened that could potentially be a virus' option enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code.
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter.
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
Lotus Notes R5 Client version 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename.
CardBoard 2.4 is a CGI script for sending greeting cards that allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
Buffer overflow in HttpSaveCVP.dll and HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
Autogalaxy stores usernames and passwords in cleartext in cookies, making it easier for remote attackers to obtain authentication information.
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string.
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
Buffer overflow in VanDyke SecureCRT before version 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long username or password.
Buffer overflows in DayDream BBS versions 2.9 through 2.13 may allow remote attackers to execute arbitrary code via specific control codes.
Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.