CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.
Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.
The Windows 2000 telnet client attempts to perform NTLM authentication by default, allowing remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL pointing to a malicious server.
The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoking the JspServlet.
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program. This could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.
Check Point VPN-1/FireWall-1 version 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests.
Buffer overflow in CamShot WebCam Trial 2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.
Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username.
Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter.
A vulnerability in Microsoft Office 2000 allows an attacker to execute arbitrary commands by placing a malicious DLL in the same directory as the document. When the document is launched, the system looks for required DLLs in that directory, creating an opportunity for exploitation.
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
Buffer overflow in the pam_smb and pam_ntdom pluggable authentication modules allows remote attackers to execute arbitrary commands via a login with a long user name.
Multiple buffer overflows in the eject tool on FreeBSD and possibly other operating systems allow local users to gain root privileges.
Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request.
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
The kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, allowing local users to gain root privileges by triggering malformed kernel messages.
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings. This allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.