CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request passed to the extension through IIS 5.0.
Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the '.ASX Buffer Overrun' vulnerability.
The index.php file in Jelsoft vBulletin improperly initializes a PHP variable used to store template information. This allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.
SSH daemon version 1 (SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack.
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
The FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when expanded.
Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
Multiple buffer overflows in ePerl before version 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).
Vulnerability in WebCalendar 0.9.26 allows remote command execution.
CVE-2001-1162 describes a directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before version 2.2.0a. This allows remote attackers to overwrite certain files by using '..' in a NETBIOS name, which is used as the name for a .log file.
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
CVE-2001-1078 describes a format string vulnerability in the flog function of eXtremail version 1.1.9 and earlier, allowing remote attackers to gain root privileges via format specifiers in SMTP and POP3 commands.
CVE-2001-1080 affects AIX 4.3.x and 5.1 systems, where the diagrpt program uses the DIAGDATADIR environment variable to locate and execute certain programs. This allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, allowing local users to bypass resource limits (rlimits) set in pam.d.
Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SMTP HELO command.
Akopia Interchange versions 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, allowing a remote attacker to gain administrative access via the demo stores.
Buffer overflow in the tip tool in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
The BAT! mail client allows remote attackers to bypass user warnings of executable attachments. It is possible to execute arbitrary commands via an attachment whose file name contains many spaces, which causes the BAT! to misrepresent the attachment's type with a different icon.