CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflows in Quake 1.9 client allow remote malicious servers to execute arbitrary commands via long precache paths, server names, server addresses, or arguments to the map console command.
Buffer overflow in the Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
The System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
CVE-1999-0003 vulnerability allows executing commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.
A configuration in web browsers such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
An account on a router, firewall, or other network device has a guessable password.
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
A Unix account has a default, null, blank, or missing password.
Buffer overflows in the CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication, enabling them to obtain system information, disable logging, or modify caches.
The bdash game on Linux has a buffer overflow vulnerability that allows local users to gain root access.
The info2www CGI script allows remote file access or remote command execution.
The mmap function in FreeBSD allows users to modify append-only or immutable files.
Squid Internet Object Cache version 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
Buffer overflow in the web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
Some web servers running on Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
Buffer overflow in War FTP allows remote execution of commands.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS