CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
Buffer overflow in HttpSaveCVP.dll and HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
Autogalaxy stores usernames and passwords in cleartext in cookies, making it easier for remote attackers to obtain authentication information.
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT allows remote attackers to execute arbitrary code via a certain configuration parameter.
Java Runtime Environment (JRE) and SDK versions 1.2 through 1.3.0_04 allow untrusted applets to access the system clipboard.
A format string vulnerability in libvanessa_logger version 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS versions 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
The SpeedXess HA-120 DSL router has a default administrative password of 'speedxess', allowing remote attackers to gain access.
Pathways Homecare 6.5 uses weak encryption for user names and passwords, allowing local users to gain privileges by recovering passwords from the pwhc.ini file.
OpenSSH before version 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged.
Lotus Notes R5 Client version 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
The lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter.
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header.
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources.
CVE-2001-1562 describes a format string vulnerability in nvi before version 1.79 that allows local users to gain privileges via format string specifiers in a filename.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS