CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.
AIX cdmount allows local users to gain root privileges via shell metacharacters.
Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.
Veritas Volume Manager creates a world writable .server_pids file, allowing local users to add arbitrary commands into the file, which are then executed by the vmsa_server script.
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory.
The GSSFTP FTP daemon in Kerberos 5 version 1.1.x does not properly restrict access to some FTP commands, allowing remote attackers to cause a denial of service and local users to gain root privileges.
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, allowing remote attackers to execute arbitrary commands by uploading files that will be executed as CGI scripts by the web server.
The 'capabilities' feature in Linux before version 2.2.16 allows local users to cause a denial of service or gain privileges by setting capabilities to prevent a setuid program from dropping privileges.
The userreg.cgi CGI program in MailStudio 2000 version 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
IBM WebSphere server version 3.0.2 allows a remote attacker to view the source code of a JSP program by requesting a URL with the JSP extension in upper case.
The default configuration of BEA WebLogic versions 3.1.8 through 4.5.1 allows a remote attacker to view the source code of a JSP program by requesting a URL with the JSP extension in upper case.
OpenSSH does not properly drop privileges when the UseLogin option is enabled, allowing local users to execute arbitrary commands by providing the command to the ssh daemon.
Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
A buffer overflow in the restore program version 0.4b17 and earlier in the dump package allows local users to execute arbitrary commands via a long tape name.
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, allowing local users to modify SNMP configuration or gain privileges.
Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
A FreeBSD patch for SSH on January 14, 2000, configures SSH to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered.