CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be set without a password, allowing remote attackers to connect to the printer and change its IP address or disable logging.
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
Some classic Cisco IOS devices have a vulnerability in PPP CHAP authentication, allowing unauthorized PPP connections to be established.
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
The sysdef command in Solaris allows local users to read kernel memory, potentially leading to root privileges.
Buffer overflow in AIX rcp command allows local users to obtain root access.
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account. This allows any local or remote attacker who gains access to the oracle account to gain privileges or modify arbitrary files by altering the configuration file.
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache, potentially leading to IP address spoofing or denial of service attacks.
The _writers property in NeXT NetInfo allows local users to gain root privileges or conduct a denial of service attack.
The bugfiler program in AIX allows local users to gain root access.
The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
The Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file.
The CGI handler program in IRIX allows arbitrary command execution, posing a serious security threat.
The vulnerability allows remote execution of arbitrary commands through the Guestbook CGI program.
Apache httpd versions 1.1.1 and earlier are vulnerable to cookie buffer overflow.
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
The spaceball program in SpaceWare 7.3 v1.0 on IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain commands to be executed.