CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
A vulnerability in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, allowing remote attackers to execute SQL commands.
Windows NT Autorun executes the autorun.inf file on non-removable media, allowing local attackers to specify an alternate program to execute when other users access a drive.
HP Ignite-UX does not save the /etc/passwd file when creating an image of a trusted system, which can result in the password field being blank, allowing an attacker to gain privileges.
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
In BSD systems, procfs allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, allowing remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
Check Point's Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
The Axis 700 Network Scanner does not properly restrict access to administrator URLs, allowing users to bypass password protection via a .. (dot dot) attack.
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
Finger Server version 0.82 allows remote attackers to execute commands via shell metacharacters.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS