CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
HP JetAdmin version D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
libnsl in Solaris allows an attacker to perform a denial of service on rpcbind.
Slackware Linux versions 3.2 through 3.5 do not properly check for the presence of the /etc/group file. When it is missing, the system fails to drop privileges, resulting in root privileges being assigned to any local user logging onto the server.
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
Ray Chan WWW Authorization Gateway version 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the 'user' parameter.
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via 'long input strings.'
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
A vulnerability in SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, allowing remote attackers to conduct spoofing and hijack TCP sessions.
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry. This could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable.
COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in res_diff, ca.src, and mail.chk.
SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
Textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
A bug in the AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments.
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with 'EVERYONE FULL CONTROL' permissions, allowing local users to install a Trojan horse dll.
Buffer overflow in NIS+, in Sun's rpc.nisd program.
The Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, allowing remote attackers to guess usernames or passwords via a brute force attack.