CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method.
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, allowing attackers to modify the stack and possibly gain privileges.
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long LB_DIR messages to ListBox or CB_DIR messages to ComboBox controls in a privileged application.
In OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, the PAM authentication mechanism in SSH1 does not check the result of the authentication attempt, which may allow remote attackers to gain privileges.
A stack-based buffer overflow in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL.
CVE-2003-0865 involves a heap-based buffer overflow in the readstring function of httpget.c for mpg123 versions 0.59r and 0.59s. This allows remote attackers to execute arbitrary code via a long request.
The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, allowing remote attackers to execute arbitrary code via a buffer overflow attack.
The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."
Integer overflows in PHP versions before 4.3.3 in base64_encode and the GD library have unknown impact and attack vectors.
A stack-based buffer overflow in webfs before version 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname.
A stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2 allows attackers with 'Connect' privileges to execute arbitrary code via a LOAD command.
The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration. This differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP applications.
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a 'data' tag pointing to the malicious code.
ProFTPD versions 1.2.7 through 1.2.9rc2 do not properly translate newline characters when transferring files in ASCII mode, allowing remote attackers to execute arbitrary code via a buffer overflow using certain files.
mod_gzip version 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via a symlink attack on predictable temporary filenames on Unix systems or an NTFS hard link on Windows systems when the 'Strengthen default permissions of internal system objects' policy is not enabled.
Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, occurs when running in debug mode and using the Apache log. This allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an 'Accept-Encoding: gzip' header.
An unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements.