CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.
Buffer overflow in thttpd HTTP server before version 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a 'secure' hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
Buffer overflow in the POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long 'From' header in an e-mail message.
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, known as the 'File Access URL' vulnerability.
Vulnerability in BIND causing denial of service via malformed SIG records.
Buffer overflow in the FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long user name or password.
Buffer overflow in BIND 8.2 via NXT records may lead to unauthorized access or service disruption.
CVE-1999-0837 vulnerability affects BIND service, which can be subject to a denial of service (DoS) attack due to improper closing of TCP sessions via so_linger.
Version 1.11 of Xtramail contains buffer overflow vulnerabilities that can be exploited by attackers to cause a denial of service and potentially execute arbitrary commands. The attack can be carried out through long PASS commands in the POP3 service, HELO commands in the SMTP service, or long usernames in the Control Service.
Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
The whois.cgi program in the Whois Internic service allows remote attackers to execute commands via shell metacharacters in the domain entry.
Vulnerability in StackGuard before version 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack that directly modifies a pointer to a return address.
Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the '8BPS' image type in a Photo Shop image header.
The CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
A buffer overflow in InterScan VirusWall versions 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.
A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway versions 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.
Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.