CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Versions super 3.11.6 and others have a buffer overflow in the syslog utility, allowing a local user to gain root access.
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, posing a risk of sensitive information disclosure.
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
ARCserve NT agents use weak encryption (XOR) for passwords, allowing remote attackers to sniff the authentication request to port 6050 and decrypt the password.
The install.iss installation script for Internet Security Scanner (ISS) version 5.3 for Linux allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.
In IIS and other web servers, an attacker can execute commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
The nsralist program in Digital Unix Networker has a buffer overflow that allows local users to gain root privileges.
SVGAlib zgv version 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
A buffer overflow in lsof allows local users to obtain root privilege.
The snap command in AIX before version 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear it when snap -a is executed. This could allow local users to access the password file.
Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
mSQL (Mini SQL) version 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
The vulnerability in rpc.pcnfsd on HP systems allows remote root access by changing permissions on the main printer spool directory.
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD can lead to remote root access.
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, due to a problem with a null NT hash value.
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.