CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
Various modems that do not implement a guard time or are configured with a guard time of 0 can allow remote attackers to execute arbitrary modem commands via a '+++' sequence in ICMP packets, the subject of an e-mail message, IRC commands, and others.
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, allowing remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Buffer overflow in Sun's ping program can give local users root access.
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
Buffer overflow in the web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL.
SSH version 1.2.25 on HP-UX allows access to new user accounts.
Multiple buffer overflows in how dtmail handles attachments allow a remote attacker to execute commands.
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
CVE-1999-1417 describes a format string vulnerability in the AnswerBook2 (AB2) web server dwhttpd 3.1a4 that allows remote attackers to cause a denial of service and potentially execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the 'sioux' vulnerability.
The Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
NT users can gain debug-level access on a system process using the Sechole exploit.
The SNMP community name is guessable, which can lead to unauthorized access to network devices.
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
The Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
A vulnerability has been identified that allows arbitrary command execution via a buffer overflow in the IMAP authenticate command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS