CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
BEA Systems WebLogic Express and WebLogic Server versions 5.1 SP1-SP6 allow remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
Unspecified vulnerability in Haakon Nilsen's simple integrated publishing system (SIPS) before version 0.2.4, related to a 'grave security fault.'
Buffer overflow in the HP-UX cstm program allows local users to gain root privileges.
The bbd server in Big Brother System and Network Monitor before version 1.5c2 allows remote attackers to execute arbitrary commands via the '&' shell metacharacter.
CVE-2000-0997 describes format string vulnerabilities in the eeprom program in OpenBSD, NetBSD, and possibly other operating systems, allowing local attackers to gain root privileges.
CVE-2000-0995 describes a vulnerability in the yp_passwd program in OpenBSD that allows attackers to gain root privileges by providing a malformed name.
A vulnerability in the pw_error function in the BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
The fstat program in OpenBSD has a format string vulnerability that allows local users to gain root privileges via the PWD environmental variable.
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL.
Internet Explorer versions prior to 5.5 forwards cached user credentials for a secure web site to insecure pages on the same site. This could allow remote attackers to obtain the credentials by monitoring connections to the web server.
CVE-2000-0950 describes a format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) that allows local users to execute arbitrary commands via a malformed display name.
CVE-2000-0969 describes a format string vulnerability in Half Life dedicated server build 3104 and earlier, allowing remote attackers to execute arbitrary commands by injecting format strings into the changelevel command via the system console or rcon.
Buffer overflow in the IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
The pluggable authentication module for MySQL (pam_mysql) before version 0.4.7 does not properly cleanse user input when constructing SQL statements, allowing attackers to obtain plaintext passwords or hashes.
Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data.
cmd5checkpw version 0.21 and earlier allows remote attackers to cause a denial of service via an 'SMTP AUTH' command with an unknown username.
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, allowing remote attackers to modify the password without knowing the original password.
A buffer overflow vulnerability was found in the ncurses library that allows a local user to execute arbitrary commands via long environmental variables such as TERM or TERMINFO_DIRS.
WinU versions 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.
CVE-2000-0996 describes a vulnerability in the su program in OpenBSD that allows local attackers to gain root privileges via a malformed shell.