CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
The automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
Xyplex terminal server version 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering a CTRL-Z character or a question mark (? ).
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
The Count.cgi (wwwcount) program has a buffer overflow vulnerability that allows arbitrary command execution.
There is a buffer overflow vulnerability in the HP xlock program.
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
The SGI permissions program allows local users to gain root privileges.
Various vulnerabilities in the AIX portmir command allow local users to obtain root access.
The nslookup command in AIX allows local users to gain root access due to improper privilege management.
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters, such as a pipe character.
Buffer overflow in the writesrv command of AIX allows local users to gain root access.
Buffer overflow in AIX libDtSvc library can allow local users to gain root access.
Buffer overflow in AIX xdat gives local users root access.
The mylog script in CGI PHP allows an attacker to read any file on the target server.
Buffer overflow in the telnet daemon in the tgetent function allows remote attackers to gain root access via the TERMCAP environmental variable.
A vulnerability in the sort tool allows local users to modify arbitrary files writable by the user running sort by creating temporary files and following symbolic links.
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be set without a password, allowing remote attackers to connect to the printer and change its IP address or disable logging.
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.