CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
ScozNews 1.2.1 and earlier contain multiple PHP remote file inclusion vulnerabilities via the CONFIG[main_path] parameter. An attacker can execute arbitrary PHP code by providing a malicious URL in this parameter in several script files.
An integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 occurs when handling the Content-Length HTTP header. Remote attackers can exploit this to cause a denial of service (crash) and potentially execute arbitrary code.
PHP remote file inclusion vulnerability in Quezza 1.0 and earlier, and possibly 1.1.0, via the quezza_root_path parameter in includes/class_template.php. An attacker can remotely execute arbitrary PHP code.
Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server before 5.00.035. Remote attackers can cause denial of service or execute arbitrary code via malformed packets.
In Cosmoshop 8.11.106 and earlier, the edit_mailtexte.cgi and bestmail.cgi scripts are vulnerable to directory traversal. A remote administrator can read arbitrary files on the server using ".." sequences in the file parameter.
SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier. Remote attackers can execute arbitrary SQL commands via the artnum parameter.
In BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7, HTTP handlers store usernames and passwords in cleartext in the server log when access to a web application or protected JWS fails. This allows attackers to gain privileges.
An unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly. This could allow attackers to bypass intended security policies.
A heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 may allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.
A directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files by using an encoded drive letter (C:%5C) in a URL.
DUbanner 3.1 contains a vulnerability in add.asp that allows remote attackers to upload files with arbitrary extensions, including ASP, potentially leading to arbitrary code execution on the server. Client-side restrictions can be easily bypassed.
The vulnerability in freshclam in ClamAV 0.88 and ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, allowing local users to read portions of arbitrary files when an error message displays the first line of the target file.
IBM WebSphere Application Server versions 5.0.2 and 5.1.1, as well as earlier cumulative fixes, allow unauthorized EJB access on Solaris systems via a crafted LTPA token.
An unspecified vulnerability in IBM WebSphere Application Server versions 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 related to the administrative console. The impact and attack vectors are unknown.
A stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long SSH_MSG_KEXINIT messages, which may overflow when logged.
An unspecified vulnerability in IBM WebSphere Application Server versions 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 related to HTTP request handlers. Remote attackers can exploit this flaw, but the impact details are unknown.
IBM WebSphere Application Server versions 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in the addNode.log file. This allows attackers to gain privileges.
WebSphere Application Server 5.0.2 and earlier versions store admin and LDAP passwords in plaintext in FFDC logs upon failed login attempts, allowing attackers to gain privileges.
In Raydium SVN revision 312 and earlier, the raydium_network_read function in network.c contains a buffer overflow. A remote attacker can send packets with long global variables to the client, allowing arbitrary code execution.
A stack-based buffer overflow exists in the WeOnlyDo wodSSHServer ActiveX Component versions 1.2.7 and 1.3.3 DEMO, also used in FreeSSHd 1.0.9 and freeFTPd 1.0.10. Remote attackers can exploit a long key exchange algorithm string to execute arbitrary code.