CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The rpc.mountd service in Solaris generates error messages that may allow a remote attacker to determine what files are on the server.
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument.
A vulnerability in suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.
Inverse query buffer overflow in BIND 4.9 and BIND 8 can lead to unauthorized access or system crashes.
Buffer overflows in Quake 1.9 client allow remote malicious servers to execute arbitrary commands via long precache paths, server names, server addresses, or arguments to the map console command.
The rpcbind service in Solaris can be exploited to overwrite arbitrary files and gain root access.
Buffer overflow in the Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
Vulnerabilities in ipxchk and ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allow local users to gain root access via a modified IFS environmental variable.
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
The System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.
CVE-1999-0003 vulnerability allows executing commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
A configuration in web browsers such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
An account on a router, firewall, or other network device has a guessable password.
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
Buffer overflows in the CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
A Unix account has a default, null, blank, or missing password.
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication, enabling them to obtain system information, disable logging, or modify caches.
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
The info2www CGI script allows remote file access or remote command execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS