CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges.
gpm-root in the gpm package does not properly drop privileges, allowing local users to gain higher privileges by starting a utility from gpm-root.
The kreatecd program in Linux trusts a user-supplied path used to locate the cdrecord program, allowing local users to gain root privileges.
The IMAP server in SuSE Linux allows remote attackers to bypass IMAP authentication and gain privileges.
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the 'Always prompt for login name and password' option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
The atsadc program in the atsar package for Linux does not properly check the permissions of an output file, allowing local users to gain root privileges.
Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.
Buffer overflow in the StarScheduler web server in StarOffice allows remote attackers to gain root access via a long GET command.
Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
Buffer overflow in the TT_SESSION environment variable in the ToolTalk shared library allows local users to gain root privileges.
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program, potentially gaining elevated privileges.
The SGI InfoSearch CGI program (infosrch.cgi) allows remote attackers to execute commands via shell metacharacters.
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.