CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
AeroMail versions before 1.45 have a cross-site scripting vulnerability in message.php, allowing remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.
Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d allows user 'skank' on machine 'starscream' to become a key manager when the 'first time connection' feature is enabled and before any legitimate administrators have connected.
OpenBSD versions 2.9 through 3.1 allow local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.
The vulnerability in simpleinit on Linux systems is that it does not close a FIFO file descriptor before creating a child process. This allows the child process to execute arbitrary programs with root privileges.
Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
The 'Same Origin Policy' (SOP) in Netscape, Mozilla, and Internet Explorer allows a remote web server to access HTTP and SOAP/XML content from restricted sites. An attacker can exploit this vulnerability by mapping the malicious server's DNS domain to the restricted site and passing information between frames.
A heap-based buffer overflow in the TFTP server capability in Cisco IOS versions 11.1, 11.2, and 11.3 can be exploited by remote attackers. Attackers can cause a denial of service or modify configuration by sending a long filename.
A cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script.
KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems do not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
Bugzilla versions 2.14 before 2.14.2 and 2.16 before 2.16rc2 improperly handle URL-encoded field names, which may cause certain fields to appear unset. This results in the removal of group permissions on bugs when buglist.cgi is provided with the encoded field names.
Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.
Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname obtained through a reverse DNS lookup.
The VPN Server module in the Linksys EtherFast BEFVP41 Cable/DSL VPN Router before version 1.40.1 reduces the key lengths for manually entered keys, making it easier for attackers to crack them.
Check Point FireWall-1 SecuRemote/SecuClient versions 4.0 and 4.1 allow clients to bypass the 'authentication timeout' by modifying the to_expire or expire values in the client's users.C configuration file.
Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 have cross-site scripting vulnerabilities. Attackers can exploit the full name field to execute scripts in the context of other Bugzilla users.
The file filemanager_forms.php in PHProjekt versions 3.1 and 3.1a has a vulnerability that allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.
Foundry Networks ServerIron switches do not decode URIs when applying 'url-map' rules, which could make it easier for attackers to forward traffic to a different server than intended.