CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Vacation program allows remote users to execute commands through the sendmail command.
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address, which may lead to the leakage of sensitive information about the client or internal network configuration.
The LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
HAMcards Postcard CGI script version 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing.
CVE-1999-0052 concerns IP fragmentation in FreeBSD that can lead to system crashes. A remote attacker can exploit this vulnerability to cause unexpected system downtime.
BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
AIX infod allows local users to gain root access through an X display.
The automountd (autofsd) services in IRIX and AIX allow remote users to execute commands as root.
Buffer overflow in NFS mountd allows remote attackers to gain root access, primarily on Linux systems.
Buffer overflow in dbadmin CGI program version 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions that are world-readable and world-writable. This could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root or modify system parameters.
A Windows NT domain user or administrator account has a guessable password.
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
Various modems that do not implement a guard time or are configured with a guard time of 0 can allow remote attackers to execute arbitrary modem commands via a '+++' sequence in ICMP packets, the subject of an e-mail message, IRC commands, and others.