CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, allowing remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Buffer overflow in Sun's ping program can give local users root access.
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
Buffer overflow in the web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL.
SSH version 1.2.25 on HP-UX allows access to new user accounts.
Multiple buffer overflows in how dtmail handles attachments allow a remote attacker to execute commands.
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
CVE-1999-1417 describes a format string vulnerability in the AnswerBook2 (AB2) web server dwhttpd 3.1a4 that allows remote attackers to cause a denial of service and potentially execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the 'sioux' vulnerability.
The Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
NT users can gain debug-level access on a system process using the Sechole exploit.
The SNMP community name is guessable, which can lead to unauthorized access to network devices.
The Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, allowing remote attackers to modify the switch's configuration.
A vulnerability has been identified that allows arbitrary command execution via a buffer overflow in the IMAP authenticate command.
Power management on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, allowing an attacker with physical access to input characters to the last active application for a short period after the system is restoring.
Vulnerability in the loginout module in Digital OpenVMS 7.1 and earlier versions allows unauthorized access when external authentication is enabled.