CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telnetd.
Buffer overflow in Bea WebLogic Server before version 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a '..' string.
Vulnerability in fetchmail 5.5.0-2 and earlier related to the AUTHENTICATE GSSAPI command.
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.
The bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
The itetris/xitetris program version 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program. This allows local users to gain root privileges by changing their PATH to point to a malicious gunzip program.
The mod_sqlpw module in ProFTPD does not reset a cached password when a user changes accounts using the 'user' command, allowing authenticated attackers to gain privileges of other users.
Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long MAIL FROM command.
The bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
The 'Configure Your Server' tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, allowing attackers with physical access to the controller to install malicious programs.
Buffer overflow in the kdc_reply_cipher function of the libkrb library (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, used in Kerberized applications such as telnetd and login, allows local users to gain root privileges.
The 'Multiple Users' Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, effectively removing the Owner password.
Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands.
The GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program.
MDaemon Pro version 3.5.1 and earlier allows local users to bypass the 'lock server' security setting by pressing the Cancel button at the password prompt, then pressing the enter key.
Buffer overflow in MySQL before version 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.
Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.
Multiple vulnerabilities in phpMyChat before version 0.14.5 exist in input.php3, handle_inputH.php3, or index.lib.php3, which may lead to unknown consequences, possibly related to user spoofing or improperly initialized variables.
Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter.