CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
The xfs command in XFree86 is vulnerable to a symlink attack, allowing local users to create files in restricted directories. This may lead to privilege escalation or cause a denial of service.
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key. The permissions of this key allow local and remote users to obtain the physical paths of directories that are being indexed.
The setup wizard for Internet Explorer 5.0 disables the screen saver and the Task Scheduler Service, which may lead to security risks. If a failure occurs during an unattended installation, the system could be exposed to users with physical access.
OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
Umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
The HTTP server in Cisco 7xx series routers from versions 3.2 to 4.2 is enabled by default, allowing remote attackers to change the router's configuration.
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
MC/ServiceGuard and MC/LockManager in HP-UX allow local users to gain privileges through SAM.
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the 'Encrypt Saved Mail' preference.
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.