CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
AWStats 4.0 and 6.2 contain a vulnerability in the awstats.pl script that allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the config parameter.
A buffer overflow vulnerability in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
A vulnerability in AWStats 6.3 and 6.4 allows a remote attacker to execute Perl code via the PluginMode parameter in the awstats.pl script.
SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter.
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.
Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname.
Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header.
SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.
A buffer overflow vulnerability in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter.
A buffer overflow vulnerability in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.
A buffer overflow vulnerability in LTris before version 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.
Multiple buffer overflows in OpenSLP before version 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.
Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.
SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter.
Vulnerability in newsscript.pl for NewsScript allows a remote attacker to gain administrator privileges by setting the mode parameter to admin.
DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.
SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.
A double free vulnerability in gtk2 before version 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.
A buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path.
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via the email, url, orderby, min, show, and ratenum parameters in various functions.