CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.
CVE-2001-0111 describes a format string vulnerability in splitvt before version 1.6.5 that allows local users to execute arbitrary commands via the -rcfile command line argument.
FTP Voyager ActiveX control before version 8.0, when marked as safe for scripting, allows remote attackers to execute arbitrary commands.
An unknown vulnerability in the SMTP server in Lotus Domino versions 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in 'RCPT TO' commands.
Vulnerability in Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration via the default DOCSIS read-write community string.
phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program.
The default permissions for the RAS Administration key in Windows NT 4.0 allow local users to execute arbitrary commands by changing the value to point to a malicious DLL.
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
MailMan Webmail version 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.
Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.
Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name.
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allow local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages, potentially leading to privilege escalation.
A memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.
Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request.
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which enables the generation of false proxy responses and potentially gaining privileges.
CVE-2001-0032 describes a format string vulnerability in ssldump that may allow remote attackers to cause a denial of service and potentially gain root privileges via malicious format string specifiers in a URL.
IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, allowing remote attackers to gain access to the database.
Multiple buffer overflows in Lexmark MarkVision printer driver programs allow local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.
The common.inc.php file in phpWebLog 0.4.2 improperly initializes the $CONF array, inadvertently setting the password to a single character. This allows remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.