CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A remote attacker can execute commands through Majordomo using the Reply-To field and a 'lists' command.
AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
Some implementations of rlogin allow root access if given a -froot parameter.
Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges. It has been fixed by updates PHSS_4038, PHSS_4055, and PHSS_4066.
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges.
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges. This issue has been fixed by updates PHSS_4994 and PHSS_5438.
The utmp file in Sun/Solaris allows local users to gain root access if it is writable by users other than root.
Performance tools in AIX Licensed Program Product allow local users to gain root access.
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
The WIZ command in Sendmail is enabled, allowing root access to the system.
The /usr/5bin/su program in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), allowing local users to gain privileges via Trojan horse programs.
SCO UNIX System V/386 Release 3.2 and other SCO products install home directories at /tmp for the dos user and /usr/tmp for the asg user, allowing other users to gain access to those accounts since these directories are world-writable.
Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon.
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the 'no ip source-route' command.
Vulnerability in DEC OpenVMS VAX versions 5.5-2 through 5.0 and OpenVMS AXP 1.0 allows local users to gain system privileges.
SunOS versions 4.1 through 4.1.3 have insecure permissions on files and directories, allowing local attackers to gain root access.
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, allowing a local user to gain root access if the lower 16 bits are set to 0.
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the 'established' keyword.
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the 'established' keyword is set, which could allow attackers to bypass filters.
Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS versions 5.0 through 5.4-2 allows local users to gain elevated privileges.