CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site.
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
The crypt function in QNX uses weak encryption, allowing local users to decrypt passwords.
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands. This is known as the 'Link View Server-Side Component' vulnerability.
The default permissions for the Cryptography\Offload registry key in Windows NT 4.0 allow local users to compromise the cryptographic keys of other users.
The BizDB CGI script, bizdb-search.cgi, allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.
IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, known as the 'Myriad Escaped Characters' Vulnerability.
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
The dansie shopping cart application (cart.pl) allows remote attackers to modify sensitive purchase information via hidden form fields.
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
The default encryption method of PcAnywhere 9.x uses weak encryption, allowing remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus.
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.