CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The set_time_limit function in Gallery before version 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.
Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions.
Cisco Secure Access Control Server (ACS) version 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.
DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename.
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 versions 4.6(0) and 4.6(1) and 15454 and 15454 SDH versions 4.6(0) and 4.6(1) allows remote attackers to gain unauthorized access. The vulnerability occurs when a user account is configured with a blank password and the attacker logs in with a password longer than 10 characters.
SQL injection vulnerability in ttlast.php and last10.php scripts in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrary code.
The addImage method in admin.class.php of Image Gallery Web Application 0.9.10 does not properly validate filenames, allowing remote attackers to upload and execute arbitrary files.
PHP remote file inclusion vulnerability in index.php of GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 'doc' parameter to reference a URL on a remote web server containing the code.
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.
A buffer overflow vulnerability in the WriteToLog function of JRun web server connectors versions 3.0 through 4.0, such as mod_jrun and mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.
The vulnerability in Star before version 1.5_alpha46 is that the program does not drop the effective user ID (euid) before calling external programs. This allows local users to gain privileges by modifying the RSH environment variable to point to a malicious program.
A format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.
A buffer overflow in layer2.c of mpg123 version 0.59r and possibly 0.59s allows remote attackers to execute arbitrary code via a specially crafted MP3 or MP2 file.
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.
Vulnerability in Sendmail before version 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a configuration script with a fixed username and password, allowing remote attackers to use Sendmail as an open mail relay to send spam.