CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 is due to an untrusted search path. A local user can gain elevated privileges by modifying the PATH to point to a malicious ps or grep file.
Stack-based buffer overflow in help.cgi in the HTTP administrative interface of Sun Java System Directory Server, Red Hat Directory Server, Certificate Server, Sun ONE Directory Server, and Sun ONE Administration Server. Remote attackers can cause a denial of service (admin server crash), and local users can gain root privileges.
The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges.
Buffer overflow vulnerability in the unicode_to_bytes function in the Service Location Protocol (srvloc) dissector in Ethereal. A remote attacker can send a crafted srvloc packet with a modified length value, leading to arbitrary code execution.
A stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR versions 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name.
A heap-based buffer overflow in the KWord RTF importer for KOffice versions 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
A format string vulnerability in WinRAR versions 2.90 through 3.50 allows remote attackers to execute arbitrary code via a crafted UUE/XXE file. The flaw occurs when WinRAR displays diagnostic errors related to an invalid filename.
Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as Host and Accept in HTTP requests. The vendor suggests that this issue may be in an underlying Microsoft technology, which could mean the overflow affects other products as well.
Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the login field, search this thread feature, search for posts feature, forgot password feature, list parameter in userlistpre.php, and the select, categ, and to parameters in index.php.
Vulnerability in the pnmtopng tool of netpbm before version 10.25, when using the -trans option, uses uninitialized size and index variables when converting PNM images to PNG, which may allow attackers to execute arbitrary code by modifying the stack.
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.
The CGIwrap program before version 3.9 on Debian GNU/Linux uses an incorrect minimum UID value of 100 to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs greater than this minimum, while it should be 1000 on Debian systems.
A stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.
SQL injection vulnerability in news.php of Utopia News Pro (UNP) 1.1.3. A remote attacker can execute arbitrary SQL queries via the newsid parameter when magic_quotes_gpc is disabled and register_globals is enabled.
Format string vulnerability in the ParseBannerAndCapability function in main.c in up-imapproxy versions 1.2.3 and 1.2.4. A remote IMAP server can use format specifiers in a banner or capability line to execute arbitrary code.
Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly via the (1) txtLogin and (2) txtPassword parameters.
Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code as SYSTEM by sending a crafted DeviceIoControl command, then removing an allowed program from the firewall list.
A format string vulnerability in the input_cdda.c file of the xine-lib library allows remote CDDB servers to execute arbitrary code via specially crafted metadata in server responses when a victim plays a CD.
In XMail before version 1.22, a stack-based buffer overflow in the sendmail function allows a remote attacker to execute arbitrary code by providing a long -t command line option.