CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
VMware GSX Server 2.5.1 and earlier, and Workstation 4.0 and earlier, allow local users to gain root privileges via certain environment variables used when launching a virtual machine session.
An unknown vulnerability in the display of Merge before version 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.
Internet Explorer versions 5.01 SP3 through 6.0 SP1 allow remote attackers to access and execute scripts in the My Computer zone using the browser cache via crafted Content-Type and Content-Disposition headers.
Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.
Apple QuickTime / Darwin Streaming Server before 4.1.3f is vulnerable to an attack that can lead to service crashes. An attacker can exploit an MS-DOS device name (e.g., AUX) in a request sent to HTTP port 1220.
Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag.
Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
An off-by-one error in the fb_realpath() function may allow attackers to execute arbitrary code. The issue affects wu-ftpd versions 2.5.0 to 2.6.2 when commands cause pathnames to exceed MAXPATHLEN, leading to a buffer overflow.
Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with large length for a Text or Copyright string, or a large number of tracks, leading to a heap-based buffer overflow.
Internet Explorer versions 5.01 SP3 through 6.0 SP1 improperly determine object types returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter pointing to a malicious file.
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.
BEA WebLogic Server and Express, when using NodeManager to start servers, allow Operator users to overwrite usernames and passwords, which may enable Operators to gain Admin privileges.
The default installation of MSDE via McAfee ePolicy Orchestrator versions 2.0 to 3.0 allows attackers to execute arbitrary code. This process involves obtaining the database administrator username and encrypted password from a configuration file, cracking the password due to weak cryptography, and using it to pass commands through xp_cmdshell.
Microsoft SQL Server 7, 2000, and MSDE allow local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port, leading to a buffer overflow.
Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code.
Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3 and iChain 2.2 before Field Patch 1a allow attackers to cause a denial of service (ABEND) and possibly execute arbitrary code via (1) a long user name or (2) an unknown attack related to a "special script against login."
A stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable.
Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response.
Up2date versions 3.0.7 and 3.1.23 do not properly verify RPM GPG signatures, which could allow remote attackers to install unsigned packages from the Red Hat Network if that network is compromised.
The EXTPROC functionality in Oracle9i Database and Oracle 8i has a stack-based buffer overflow that can be exploited by authenticated database users to execute arbitrary code via a long library name.