CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before version 4.0 allows remote attackers to execute arbitrary code via a long TS value.
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) version 2.0.6.15 and earlier allows remote attackers to execute arbitrary code via a long File parameter.
Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.
The IRC script in Light 2.7.x before version 2.7.30p5 and 2.8.x before version 2.8pre10, running EPIC, allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
Buffer overflow in mailcv in HP Tru64 UNIX (versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f) allows local users to gain elevated privileges.
Multiple buffer overflows in HP Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via msgchk or .upd..loader.
Buffer overflow in the ps tool in HP Tru64 UNIX (versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f) allows local users to gain elevated privileges.
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
In Oracle 9i and 8i, the catsnmp tool is installed with a dbsnmp user that has a default password. This allows attackers to perform restricted database operations and possibly gain other privileges.
l2tpd version 0.67 does not initialize the random number generator, allowing remote attackers to hijack sessions.
The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability was incomplete, allowing remote attackers to gain additional privileges by directly requesting the web management URL.
Buffer overflow in ipcs for HP Tru64 UNIX versions 4.0f through 5.1a may allow attackers to execute arbitrary code.
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.
The i4l package on SuSE 7.3, 8.0, and possibly other operating systems has buffer overflows in the ISDN Point to Point Protocol (PPP) daemon (ipppd), which may allow local users to gain elevated privileges.
Buffer overflow in the ToolTalk RPC database server in Common Desktop Environment (CDE) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
CVE-2002-0851 describes a format string vulnerability in the ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package. This allows local users to gain root privileges via improperly handled format strings in the device name command line argument.
A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.
Format string vulnerabilities in the Oracle Listener Control utility (lsnrctl) for Oracle versions 9.2, 9.0, 8.1, and 7.3.4 allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
Mailman before version 2.0.12 has a cross-site scripting vulnerability that allows remote attackers to execute scripts as other users via a subscriber's list subscription options in the adminpw or info parameters.