CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
Multiple buffer overflows in ePerl before version 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).
Vulnerability in WebCalendar 0.9.26 allows remote command execution.
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
The FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when expanded.
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks.
Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands.
Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by the Bugzilla_login cookie in post_bug.cgi or the who parameter in process_bug.cgi.
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the '.ASX Buffer Overrun' vulnerability.
CVE-2001-1162 describes a directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before version 2.2.0a. This allows remote attackers to overwrite certain files by using '..' in a NETBIOS name, which is used as the name for a .log file.
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
CVE-2001-1078 describes a format string vulnerability in the flog function of eXtremail version 1.1.9 and earlier, allowing remote attackers to gain root privileges via format specifiers in SMTP and POP3 commands.
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, allowing local users to bypass resource limits (rlimits) set in pam.d.
CVE-2001-1080 affects AIX 4.3.x and 5.1 systems, where the diagrpt program uses the DIAGDATADIR environment variable to locate and execute certain programs. This allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
Buffer overflow in the FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.