CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2000-1014 describes a format string vulnerability in the search97.cgi script of the SCO help HTTP server for Unixware 7, allowing remote attackers to execute arbitrary commands via format characters in the queryText parameter.
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
A format string vulnerability in the top program allows local attackers to gain root privileges via the 'kill' or 'renice' function.
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
Poll It 2.0 has a vulnerability in pollit.cgi that allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an 'xhost + localhost' command, allowing local users to sniff X Windows events and gain privileges.
Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
Buffer overflow in the catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
CVE-2000-1010 describes a format string vulnerability in talkd in OpenBSD and possibly other BSD-based operating systems, allowing remote attackers to execute arbitrary commands via a user name containing format characters.
In Red Hat Linux 6.2, there is a vulnerability that relies on the pathname specified by the RSH environmental variable. This allows local users to gain root privileges by modifying the RSH variable to point to a Trojan horse program.
Format string vulnerabilities in the ssh program in OpenBSD (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, allowing local users to gain privileges by modifying the path to point to a malicious hostname program.
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.