CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, allowing remote attackers to spoof or hijack sessions.
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
The loadpage.cgi CGI script in EZShopper 3.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
The search.cgi CGI script in EZShopper 3.0 allows remote attackers to read arbitrary files via a '..' (dot dot) attack or execute commands via shell metacharacters.
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
A vulnerability in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, allowing remote attackers to execute SQL commands.
Windows NT Autorun executes the autorun.inf file on non-removable media, allowing local attackers to specify an alternate program to execute when other users access a drive.
HP Ignite-UX does not save the /etc/passwd file when creating an image of a trusted system, which can result in the password field being blank, allowing an attacker to gain privileges.
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
In BSD systems, procfs allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, allowing remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
Check Point's Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.