CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in Enterasys Vertical Horizon VH-2402S switches before firmware version 2.05.05.09 consists of a hard-coded debugging account and password, allowing a remote attacker to gain elevated privileges.
Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the language parameter.
Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via various parameters in HTTP requests.
Multiple SQL injection vulnerabilities in ProductCart Ecommerce before version 2.7 allow remote attackers to execute arbitrary SQL commands via the idcategory parameter in viewPrd.asp, lid parameter in editCategories.asp, icd parameter in modCustomCardPaymentOpt.asp, and idccr parameter in OptionFieldsEdit.asp.
Vulnerability in modifyUser.asp in Cool Cafe Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value.
Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions.
Buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 allows attackers to execute arbitrary code.
Vulnerability in Symantec pcAnywhere 10.5x and 11.x before 11.5, with 'Launch with Windows' enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.
SQL injection vulnerability in login.asp of Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
The eping_validaddr function in the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter.
Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequence in the URL, which results in an incorrect directory depth count.
The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the 'XML External Entity vulnerability.'
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter.
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via parameters such as formname, select, id, query, or string.
Vulnerability in Microsoft ISA Server 2000 allows remote attackers to connect to services using the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.
Buffer overflow vulnerability in the Web Client service in Microsoft Windows XP and Windows Server 2003. A remote authenticated user can execute arbitrary code via a crafted WebDAV request containing special parameters.
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, .cbl, or .cbm extension) with a long User field.
Buffer overflow vulnerability in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the 'Server Message Block Vulnerability.'