CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
Check Point VPN-1/FireWall-1 version 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests.
Buffer overflow in the pam_smb and pam_ntdom pluggable authentication modules allows remote attackers to execute arbitrary commands via a login with a long user name.
Buffer overflow in the University of Washington c-client library, used by pine and other programs, allows remote attackers to execute arbitrary commands via a long X-Keywords header.
Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.
The kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, allowing local users to gain root privileges by triggering malformed kernel messages.
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
A vulnerability in Microsoft Office 2000 allows an attacker to execute arbitrary commands by placing a malicious DLL in the same directory as the document. When the document is launched, the system looks for required DLLs in that directory, creating an opportunity for exploitation.
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
Multiple buffer overflows in the eject tool on FreeBSD and possibly other operating systems allow local users to gain root privileges.
Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request.
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings. This allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
Check Point VPN-1/FireWall-1 version 4.1 and earlier improperly retransmits FWS packets, even if they do not come from a valid FWZ client.
The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoking the JspServlet.
The Windows 2000 telnet client attempts to perform NTLM authentication by default, allowing remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL pointing to a malicious server.
Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter.
Buffer overflow in CamShot WebCam Trial 2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.