CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
The installation procedure of the Netscape Directory Server leaves sensitive information in a file that is accessible to local users.
The vulnerability in ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
The /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the 'cross frame' vulnerability.
IPFilter versions 3.2.3 through 3.2.10 allow local users to modify arbitrary files via a symlink attack on the saved output file.
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
Vulnerability in the Wguest CGI program allows unauthorized access to the system.
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
The xfs command in XFree86 is vulnerable to a symlink attack, allowing local users to create files in restricted directories. This may lead to privilege escalation or cause a denial of service.
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key. The permissions of this key allow local and remote users to obtain the physical paths of directories that are being indexed.
The setup wizard for Internet Explorer 5.0 disables the screen saver and the Task Scheduler Service, which may lead to security risks. If a failure occurs during an unattended installation, the system could be exposed to users with physical access.
OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
Umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.