CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command.
Jana Server versions 2.x through 2.2.1, and 1.4.6 and earlier do not restrict the number of unsuccessful login attempts, making it easier for remote attackers to gain privileges via brute force username and password guessing.
Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint versions 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
RealJukebox 2 and RealOne Player Gold allow remote attackers to execute arbitrary script in the Local computer zone by modifying the skin.ini file in an RJS archive. After extraction, the skin.ini file is parsed as HTML by Microsoft-based web readers.
Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations.
Signedness error in Jana Server versions 2.x through 2.2.1, and 1.4.6 and earlier allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.
Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.5.1C does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, allowing remote attackers to conduct man-in-the-middle attacks.
CVE-2002-1036 is a vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before version 2.0.0.0055, allowing remote attackers to execute web scripts via the Rank or Match parameters.
Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.5.2B does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.
Buffer overflow in 4D web server 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
Cisco VPN 3000 Concentrator version 3.6(Rel) and earlier, as well as 2.x.x, allows remote VPN clients to log in using PPTP or IPSEC user authentication when configured to use internal authentication with group accounts and without any user accounts.
Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.
Cisco VPN 3000 Concentrator versions 2.2.x and 3.x before 3.5.1 allows restricted administrators to access user passwords stored in plaintext in HTML source code.
The BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.
Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
PostgreSQL versions 7.2.1 and 7.2.2 allow local users to delete transaction log (pg_clog) data via the VACUUM command, potentially leading to data loss.
Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
The X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain elevated privileges.