CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
NT users can gain debug-level access on a system process using the Sechole exploit.
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
The SNMP community name is guessable, which can lead to unauthorized access to network devices.
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
The Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
A vulnerability has been identified that allows arbitrary command execution via a buffer overflow in the IMAP authenticate command.
NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, allowing remote attackers to modify the switch's configuration.
Power management on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, allowing an attacker with physical access to input characters to the last active application for a short period after the system is restoring.
Vulnerability in the loginout module in Digital OpenVMS 7.1 and earlier versions allows unauthorized access when external authentication is enabled.
libnsl in Solaris allows an attacker to perform a denial of service on rpcbind.
The 'established' command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed. This can lead to administrators configuring less restrictive access controls than intended if they do not understand this functionality.
HP JetAdmin version D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
Slackware Linux versions 3.2 through 3.5 do not properly check for the presence of the /etc/group file. When it is missing, the system fails to drop privileges, resulting in root privileges being assigned to any local user logging onto the server.
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
Ray Chan WWW Authorization Gateway version 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the 'user' parameter.
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via 'long input strings.'
A vulnerability in SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.