CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflows in Bisonware FTP server prior to version 4.1 allow remote attackers to cause a denial of service and possibly execute arbitrary commands via long (1) USER, (2) LIST, or (3) CWD commands.
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of 'untrusted scripted paste'.
SSH server (sshd2) before version 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
The AV option for MS Exchange Server in InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree. This could allow viruses to escape detection if user rules cause messages to be moved to different mailboxes.
Buffer overflow in Solaris lpset program allows local users to gain root access.
The inndstart program in INN allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
The inndstart program in INN allows local users to gain root privileges via the 'pathrun' parameter in the inn.conf file.
Buffer overflow in the dtprintinfo program of Solaris may lead to unauthorized access to the system.
Internet Explorer with a security setting below Medium allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, allowing remote attackers to read arbitrary files from the client by specifying the full pathname for the file.
The installation procedure of the Netscape Directory Server leaves sensitive information in a file that is accessible to local users.
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
The vulnerability in ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
The /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the 'cross frame' vulnerability.
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
IPFilter versions 3.2.3 through 3.2.10 allow local users to modify arbitrary files via a symlink attack on the saved output file.
Vulnerability in the Wguest CGI program allows unauthorized access to the system.
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.