CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
The lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.
Lotus Notes R5 Client version 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
Xitami versions 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, which has default world-readable permissions.
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
Buffer overflow in HttpSaveCVP.dll and HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
CardBoard 2.4 is a CGI script for sending greeting cards that allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename.
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string.
Autogalaxy stores usernames and passwords in cleartext in cookies, making it easier for remote attackers to obtain authentication information.
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
Java Runtime Environment (JRE) and SDK versions 1.2 through 1.3.0_04 allow untrusted applets to access the system clipboard.
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT allows remote attackers to execute arbitrary code via a certain configuration parameter.
A format string vulnerability in libvanessa_logger version 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
Pathways Homecare 6.5 uses weak encryption for user names and passwords, allowing local users to gain privileges by recovering passwords from the pwhc.ini file.
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS versions 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
The SpeedXess HA-120 DSL router has a default administrative password of 'speedxess', allowing remote attackers to gain access.
Buffer overflows in DayDream BBS versions 2.9 through 2.13 may allow remote attackers to execute arbitrary code via specific control codes.