CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2001-0975 describes a buffer overflow vulnerability in Oracle Internet Directory Server (LDAP) versions 2.1.1.x and 3.0.1, allowing remote attackers to execute arbitrary code.
A critical vulnerability in the InJoin or LiveContent Directory Server allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via malformed BER encodings.
Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named winlogon.exe, csrss.exe, smss.exe, and services.exe. This could allow local users to install Trojan horses that cannot be stopped with the Task Manager.
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
iPlanet Directory Server 4.1.4 and earlier is vulnerable to a denial of service attack that can cause system crashes. Attackers can exploit invalid BER length fields, which may also allow arbitrary code execution.
Buffer overflows in Teamware Office Enterprise Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings, potentially leading to buffer overflows.
Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Lotus Domino R5 before version R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
Buffer overflows in the InJoin Directory Server or LiveContent Directory may allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code.
Oracle Internet Directory Server versions 2.1.1.x and 3.0.1 are vulnerable to remote attacks that can lead to denial of service and potentially execute arbitrary code. This attack exploits invalid encodings of BER OBJECT-IDENTIFIER values.
Lotus Domino R5 versions before R5.0.7a are vulnerable to buffer overflows that can be exploited by remote attackers to cause a denial of service (crash) and potentially execute arbitrary code.
IBM SecureWay 3.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding.
Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.
The static kernel symbol table in the dynamically loadable kernel module (dlkm) in HP-UX 11.11 is not properly configured, allowing local users to gain privileges.
Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
CVE-2001-1176 describes a format string vulnerability in Check Point VPN-1/FireWall-1 4.1 that allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, making it easier to break into the server via brute force password guessing.