CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in NFS mountd allows remote attackers to gain root access, primarily on Linux systems.
Buffer overflow in dbadmin CGI program version 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions that are world-readable and world-writable. This could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
A Windows NT domain user or administrator account has a guessable password.
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root or modify system parameters.
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
Various modems that do not implement a guard time or are configured with a guard time of 0 can allow remote attackers to execute arbitrary modem commands via a '+++' sequence in ICMP packets, the subject of an e-mail message, IRC commands, and others.
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, allowing remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Buffer overflow in Sun's ping program can give local users root access.
Buffer overflow in the web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL.
SSH version 1.2.25 on HP-UX allows access to new user accounts.
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
Multiple buffer overflows in how dtmail handles attachments allow a remote attacker to execute commands.
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
CVE-1999-1417 describes a format string vulnerability in the AnswerBook2 (AB2) web server dwhttpd 3.1a4 that allows remote attackers to cause a denial of service and potentially execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the 'sioux' vulnerability.
The Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.