CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.
The lreply function in wu-ftpd version 2.6.0 and earlier does not properly cleanse an untrusted format string, allowing remote attackers to execute arbitrary commands via the SITE EXEC command.
SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file created in the current directory of the user logging in. This could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.
Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter.
makewhatis in the Linux man package allows local users to overwrite files via a symlink attack.
Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.
Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port.
Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command.
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function.
Buffer overflows in the POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands.
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document. This could allow remote attackers to execute arbitrary commands.
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
SawMill 5.0.21 uses weak encryption to store passwords, allowing attackers to easily decrypt the password and modify the SawMill configuration.
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
The ISC DHCP client program, dhclient, allows remote attackers to execute arbitrary commands via shell metacharacters.
BlackIce Defender version 2.1 and earlier, and BlackIce Pro version 2.0.23 and earlier do not properly block Back Orifice traffic when the security setting is set to 'Nervous' or lower.
Netscape Professional Services FTP Server version 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in the fld program in the Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.
Buffer overflow in the kon program in the Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.