CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The HTTP server in Cisco 7xx series routers from versions 3.2 to 4.2 is enabled by default, allowing remote attackers to change the router's configuration.
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
MC/ServiceGuard and MC/LockManager in HP-UX allow local users to gain privileges through SAM.
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the 'Encrypt Saved Mail' preference.
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
Versions super 3.11.6 and others have a buffer overflow in the syslog utility, allowing a local user to gain root access.
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, posing a risk of sensitive information disclosure.
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
ARCserve NT agents use weak encryption (XOR) for passwords, allowing remote attackers to sniff the authentication request to port 6050 and decrypt the password.
The install.iss installation script for Internet Security Scanner (ISS) version 5.3 for Linux allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.
SVGAlib zgv version 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
In IIS and other web servers, an attacker can execute commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
The nsralist program in Digital Unix Networker has a buffer overflow that allows local users to gain root privileges.
Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.