CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
In Solaris 2.6 HW3/98, the admintool is installed with world-writable permissions, allowing local users to gain privileges by replacing it with a Trojan horse program.
There is a buffer overflow in xterm and Xaw on SGI IRIX that allows root access.
T/TCP extensions in FreeBSD are vulnerable to spoofing attacks, potentially leading to unauthorized access to transactions.
The printers program in IRIX has a buffer overflow that allows local users to gain root access.
The rpc.mountd service in Solaris generates error messages that may allow a remote attacker to determine what files are on the server.
CVE-1999-0069 is a buffer overflow vulnerability in the ufsrestore tool in Solaris. This may lead to unauthorized system access or execution of malicious code.
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument.
A vulnerability in suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.
Buffer overflows in Quake 1.9 client allow remote malicious servers to execute arbitrary commands via long precache paths, server names, server addresses, or arguments to the map console command.
Inverse query buffer overflow in BIND 4.9 and BIND 8 can lead to unauthorized access or system crashes.
Vulnerabilities in ipxchk and ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allow local users to gain root access via a modified IFS environmental variable.
Buffer overflow in the Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
The rpcbind service in Solaris can be exploited to overwrite arbitrary files and gain root access.
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
The System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
CVE-1999-0003 vulnerability allows executing commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.
A configuration in web browsers such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
An account on a router, firewall, or other network device has a guessable password.