CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the 'DHCP Request Vulnerability.'
Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c.
The vulnerability in Netscape 7.x up to version 7.2 allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability.
Vulnerability in Konqueror 3.x up to version 3.2.2-6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability.
The Smc.exe process in My Firewall Plus 5.0 build 1117 (and possibly other versions) does not drop privileges before invoking help, allowing local users to gain privileges.
Buffer overflow vulnerability in the error function in preproc.c in NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file. This is a different vulnerability than CVE-2005-1194.
Multiple buffer overflows were found in the getline function in pcalutil.c and the get_holiday function in readfile.c in pcal 4.7.1. This vulnerability allows a remote attacker to execute arbitrary code via a crafted calendar file.
Buffer overflow vulnerability in the get_field_headers function in csv2xml.cpp of csv2xml version 0.5.1. A remote attacker can exploit a crafted CSV file to execute arbitrary code.
Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.
SQL injection vulnerability in fdelmail.asp, addressc.asp, and possibly postmail.asp and fmvmail.asp in CMailServer 5.2 allows remote attackers to inject arbitrary SQL commands via the indexOfMail parameter, enabling deletion of email metadata or contact addresses.
A buffer overflow vulnerability in the get_file_list_stdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code via a crafted set of JPEG files and filenames.
The vulnerability in Safari versions 1.x to 1.2.4 (and possibly others) allows inactive windows to display dialog boxes. A remote attacker can exploit this flaw to spoof dialog boxes from other websites, leading to a 'Dialog Box Spoofing' attack. This is a different vulnerability than CVE-2004-1314.
In Veritas Backup Exec versions 8.x before 8.60.3878 Hotfix 68 and 9.x before 9.1.4691 Hotfix 40, the Agent Browser component contains a stack-based buffer overflow. A remote attacker can exploit this vulnerability by sending a registration request with a long hostname, allowing arbitrary code execution.
The load_elf_binary function in the binfmt_elf loader in Linux kernel 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8 does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
The HyperTerminal application in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value saved in a session file, allowing remote attackers to execute arbitrary code via a malicious .ht session file, website, or Telnet URL in an email, triggering a buffer overflow.
Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions contain an SQL injection vulnerability in addentry.php. Remote attackers can execute arbitrary SQL commands via the user-agent parameter.
A buffer overflow vulnerability in the ReadFontTbl function in reader.c of rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file.
An off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
Multiple buffer overflows in the sys32_ni_syscall and sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges.