CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document. This could allow remote attackers to execute arbitrary commands.
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function.
Buffer overflows in the POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands.
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
SawMill 5.0.21 uses weak encryption to store passwords, allowing attackers to easily decrypt the password and modify the SawMill configuration.
The ISC DHCP client program, dhclient, allows remote attackers to execute arbitrary commands via shell metacharacters.
BlackIce Defender version 2.1 and earlier, and BlackIce Pro version 2.0.23 and earlier do not properly block Back Orifice traffic when the security setting is set to 'Nervous' or lower.
Netscape Professional Services FTP Server version 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in the kon program in the Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.
Buffer overflow in the fld program in the Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.
AIX cdmount allows local users to gain root privileges via shell metacharacters.
Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.
Veritas Volume Manager creates a world writable .server_pids file, allowing local users to add arbitrary commands into the file, which are then executed by the vmsa_server script.
Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory.
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
The GSSFTP FTP daemon in Kerberos 5 version 1.1.x does not properly restrict access to some FTP commands, allowing remote attackers to cause a denial of service and local users to gain root privileges.