CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, allowing local users to gain root privileges by triggering malformed kernel messages.
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings. This allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
Buffer overflow in the pam_smb and pam_ntdom pluggable authentication modules allows remote attackers to execute arbitrary commands via a login with a long user name.
Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request.
Multiple buffer overflows in the eject tool on FreeBSD and possibly other operating systems allow local users to gain root privileges.
Buffer overflow in the University of Washington c-client library, used by pine and other programs, allows remote attackers to execute arbitrary commands via a long X-Keywords header.
Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.
The seed generation mechanism in the S/Key authentication system in Check Point VPN-1/FireWall-1 version 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack.
The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the 'OPSEC Authentication Vulnerability.'
Check Point VPN-1/FireWall-1 version 4.1 and earlier improperly retransmits FWS packets, even if they do not come from a valid FWZ client.
The -ftrapv compiler option in gcc and g++ version 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to overflow-related vulnerabilities.
The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier creates a default account 'sa' with no password.
Auction Weaver CGI script version 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
The Raptor GFX configuration tool, pgxconfig, allows local users to gain privileges via a symlink attack.
Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests.
The sysgen service in Aptis Totalbill does not perform authentication, allowing remote attackers to gain root privileges by connecting to the service and specifying commands to be executed.
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value.
Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.