CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka 'Stealth Attachment.'
The xmonisdn package in Linux allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
In Cart32 versions 3.0 and earlier, a security vulnerability has been identified that allows remote attackers to execute arbitrary commands due to the presence of a backdoor password.
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
The HTTP service in Cisco routers and switches running IOS versions 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, allowing remote attackers to bypass firewall rules.
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.