CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The rpcbind service in Solaris can be exploited to overwrite arbitrary files and gain root access.
Buffer overflows in Quake 1.9 client allow remote malicious servers to execute arbitrary commands via long precache paths, server names, server addresses, or arguments to the map console command.
Inverse query buffer overflow in BIND 4.9 and BIND 8 can lead to unauthorized access or system crashes.
Vulnerabilities in ipxchk and ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allow local users to gain root access via a modified IFS environmental variable.
Buffer overflow in the Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
The System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
An account on a router, firewall, or other network device has a guessable password.
A configuration in web browsers such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.
CVE-1999-0003 vulnerability allows executing commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
Buffer overflows in the CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
The bdash game on Linux has a buffer overflow vulnerability that allows local users to gain root access.
The info2www CGI script allows remote file access or remote command execution.
A Unix account has a default, null, blank, or missing password.
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication, enabling them to obtain system information, disable logging, or modify caches.
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
Squid Internet Object Cache version 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
The mmap function in FreeBSD allows users to modify append-only or immutable files.