CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka 'Stealth Attachment.'
In Cart32 versions 3.0 and earlier, a security vulnerability has been identified that allows remote attackers to execute arbitrary commands due to the presence of a backdoor password.
The xmonisdn package in Linux allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
The HTTP service in Cisco routers and switches running IOS versions 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, allowing remote attackers to bypass firewall rules.
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site.
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS