CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow in the restore program version 0.4b17 and earlier in the dump package allows local users to execute arbitrary commands via a long tape name.
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, allowing local users to modify SNMP configuration or gain privileges.
A FreeBSD patch for SSH on January 14, 2000, configures SSH to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered.
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command.
Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345.
Shiva Access Manager 5.0.0, when configured to store configuration information in an LDAP directory, stores the DN (Distinguished Name) and password in cleartext in a file that is world readable. This allows local users to compromise the LDAP server.
BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable.
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request.
xinetd version 2.1.8.x does not properly restrict connections when hostnames are used for access control and the connecting host does not have a reverse DNS entry.
Buffer overflow in splitvt version 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname.
The Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
The system does not present an appropriate legal message or warning to a user who is accessing it.
Buffer overflow in NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request.
Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string.
Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory.
The KApplication class in KDE 1.1.2 allows local users to overwrite arbitrary files in the system.
Buffer overflow in ITHouse mail server version 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
Buffer overflow in KDE kdesud on Linux allows local users to gain privileges via a long DISPLAY environmental variable.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS