CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.
The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.
Buffer overflow in sar for SCO OpenServer versions 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter.
Palm Pilot HotSync Manager version 3.0.4 on Windows 98 allows remote attackers to cause a denial of service and potentially execute arbitrary commands by sending a long string to port 14238 while the manager is in network mode.
Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.
Buffer overflow in RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
AN-HTTPd provides example CGI scripts that allow remote attackers to execute commands via shell metacharacters.
Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
Buffer overflow in the Xsco command of SCO UnixWare caused by a long argument.
A vulnerability in the Amanda backup system used in various UNIX operating systems allows runtar to execute tar with root privileges. A user can overwrite or read arbitrary files by providing target files to runtar.
Internet Explorer 4.x and 5.x in conjunction with Word 97 allows arbitrary execution of Visual Basic programs on the IE client through the Word 97 template, which does not warn the user that it contains executable content. This vulnerability also applies to Outlook when the client views a malicious email message.
Buffer overflow in Skyfull mail server occurs when processing the MAIL FROM command.
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
The AIX Packet Filtering Module (genfilt) does not properly filter traffic to destination ports greater than 32767, which may lead to unauthorized access.
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
The ikeyman tool in IBM WebSphere uses weak encryption to store a password for a key database used for SSL connections.
ypserv allows a local user to modify the GECOS and login shells of other users.
Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.