CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
The rexec service is running, which may lead to unauthorized access to the system.
The Gopher service is running, which may lead to unauthorized access to data.
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
The system is running a version of software that has been replaced with a Trojan Horse at one of its distribution points. This affects TCP Wrappers 7.6, util-linux 2.9g, wuarchive ftpd (wuftpd) 2.2 and 2.1f, IRC client (ircII) ircII 2.2.9, OpenSSH 3.4p1, and Sendmail 8.12.6.
The NetWare version of LaserFiche stores usernames and passwords unencrypted and allows administrative changes without logging.
The MetaWeb web server from MetaInfo allows users to upload, execute, and read scripts, which can lead to unauthorized access to the system.
The mail server is configured to allow SMTP mail relay, which can be exploited by spammers.
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, such as 10.x.x.x, 127.x.x.x, 217.x.x.x.
A system-critical Unix file or directory has inappropriate permissions, which may lead to unauthorized access or modification of data.
Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via nlog-smb.pl or rpc-nlog.pl.
The passwd command in Solaris can be subjected to a denial of service attack.
Buffer overflow in mkcookie for Solaris x86 allows local users to obtain root access.
The fte-console function in the fte package before version 0.46b-4.1 does not drop root privileges, allowing local users to gain root access via the virtual console device.
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems due to a malformed header type.
Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe.
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing. This DLL logs user names and passwords in cleartext in the test.log file.
The BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS