CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter.
A vulnerability in AWStats 6.3 and 6.4 allows a remote attacker to execute Perl code via the PluginMode parameter in the awstats.pl script.
A buffer overflow vulnerability in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
AWStats 4.0 and 6.2 contain a vulnerability in the awstats.pl script that allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the config parameter.
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before version 4.86 allow remote attackers to execute arbitrary SQL commands via the cat or ppuser parameters.
SQL injection vulnerability in BibORB 1.3.2 and earlier versions allows remote attackers to execute arbitrary SQL commands via the Username or Password fields.
A stack-based buffer overflow in the SetSkin function of the AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name.
The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 contains a vulnerability that allows local users to elevate their privileges by sending specially crafted access requests.
Buffer overflow vulnerability in the X11 dissector in Ethereal versions 0.8.10 through 0.10.8 allows a remote attacker to execute arbitrary code via a crafted packet.
SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.
The diatheke.pl script in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
A buffer overflow vulnerability in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.
A buffer overflow vulnerability in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.
A buffer overflow vulnerability in LTris before version 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.
Multiple buffer overflows in OpenSLP before version 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.
Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.
The vulnerability in Mac OS X 10.3.9 and earlier allows users to install, create, and execute scripts with setuid/setgid bits set, contrary to the intended design. This may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.
Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.
SQL injection vulnerability in admincore.php in BirdBlog before version 1.2.0. A remote attacker can execute arbitrary SQL commands via the userid or userpw parameters.
Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS