CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A format string vulnerability in bidwatcher before version 1.3.17 allows remote malicious web servers from eBay or a spoofed eBay server to cause a denial of service and possibly execute arbitrary code via certain responses.
Format string vulnerability in the chdev tool in IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.
Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library.
SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file.
Multiple SQL injection vulnerabilities in mod.php of phpCOIN versions 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via parameters such as faq_id, id, topic_id, ord_id, dom_id, or invd_id in various modules.
The vulnerability in the TCP design involves the lack of checking whether the TCP sequence number in an ICMP error message falls within the range of sequence numbers for sent but unacknowledged data. This allows attackers to forge ICMP messages for specific TCP connections, leading to denial-of-service (DoS) attacks via connection resets, throughput reduction, or Path MTU reduction.
Buffer overflow vulnerability in the Decrypt::makeFileKey2 function in xpdf version 3.00 and earlier allows remote attackers to execute arbitrary code via a specially crafted PDF file with a large /Encrypt /Length keyLength value.
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the 'Server Message Block Vulnerability,' and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.
SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.
Cisco devices running ACNS 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, allowing remote attackers to gain access.
Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the 'DHTML Method Heap Memory Corruption Vulnerability'.
The Hyperlink Object Library in Windows 98, 2000, XP, and Server 2003 contains a buffer overflow that can be exploited by a remote attacker to execute arbitrary code via a crafted link.
Vulnerability in poppassd_pam 1.0 and earlier allows remote attackers to change passwords for arbitrary users without verifying the old password.
PHP remote file inclusion vulnerability in install.php of mcNews version 1.3 and earlier. An attacker can modify the 'l' parameter to point to a remote server containing malicious PHP code, allowing its execution on the victim's server.
A buffer overflow vulnerability in the ipl_varyon tool on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument.
The S/MIME plugin 0.4 and 0.5 for Squirrelmail contains a vulnerability in viewcert.php that allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the cert parameter.
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.
A buffer overflow vulnerability in McAfee Scan Engine 4320 with DAT version prior to 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field. This is a variant of CVE-2005-0643.
Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the language parameter to register.php, change email feature in profile.php, posts or topics parameter to moderate.php.
Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive information.