CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter.
Unknown vulnerability in libtasn1 in versions 0.1.x before 0.1.2 and 0.2.x before 0.2.7, related to DER parsing functions.
In Subversion versions 1.0.2 and earlier, a stack-based buffer overflow during apr_time_t data conversion allows remote attackers to execute arbitrary code.
Integer overflow in the ip_setsockopt function in Linux kernel versions 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
Vulnerability in HelpViewer on Mac OS X 10.3.3 and 10.2.8 allows arbitrary code execution by processing scripts that were not initiated by the user. The issue was originally reported as a directory traversal vulnerability in Safari using the runscript parameter in a help: URI handler.
Vulnerability in BEA WebLogic Server and WebLogic Express versions 7.0 through SP5 and 8.1 through SP2. When editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, if the weblogic.xml does not have a principal-name tag, the security-role-assignment tags are inadvertently removed. This can remove intended access restrictions for the associated web application.
Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to execute arbitrary code via the ProxyCommand option or conduct port forwarding via the -R option.
Buffer overflow vulnerability in the ISAKMP functionality of Check Point VPN-1 and FireWall-1 NG products prior to versions R55 HFA-03, R54 HFA-410, NG FP3 HFA-325, and VPN-1 SecuRemote/SecureClient R56. A remote attacker can exploit this flaw to execute arbitrary code during VPN tunnel negotiation.
A heap-based buffer overflow exists in the date parsing function ne_rfc1036_parse in the neon library (libneon) version 0.24.5 and earlier. This allows remote WebDAV servers to execute arbitrary code on the client when used by cadaver before version 0.22.
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter '-' characters that begin a hostname in telnet, rlogin, ssh, or mailto URIs. This allows remote attackers to manipulate the options passed to associated programs, potentially leading to reading arbitrary files or executing arbitrary code.
A stack-based buffer overflow exists in Exim 3.35 and earlier versions when the sender_verify option is true. This allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
A stack-based buffer overflow exists in Exim 4 before version 4.33 when the headers_check_syntax option is enabled. This allows remote attackers to cause a denial of service and potentially execute arbitrary code during the header check.
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002-2004, Norton Personal Firewall 2002-2004, Norton AntiSpam 2004, and Client Firewall and Client Security may allow remote attackers to cause a denial of service or execute arbitrary code.
The Windows Shell application in Windows 98, ME, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename.
Stack-based buffer overflow in the ssl_util_uuencode_binary function in Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, leading to a heap-based buffer overflow.
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the 'ESMUser' role to gain root access.
McAfee ePolicy Orchestrator versions 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allow remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on TCP port 81.
Integer overflow in imapparse.c for Cyrus IMAP server versions 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value, leading to a buffer overflow attack.
Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing '..' (dot dot) sequences and a filename that ends in '::' which is treated as a .chm file even if it does not have a .chm extension.