CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The system does not present an appropriate legal message or warning to a user who is accessing it.
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
Buffer overflow in NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request.
Buffer overflow in splitvt version 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
The Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname.
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.
The KApplication class in KDE 1.1.2 allows local users to overwrite arbitrary files in the system.
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, known as the 'DTS Password' vulnerability.
Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field.
Buffer overflow in ITHouse mail server version 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.
The vulnerability in Microsoft SQL Server 7.0 allows the Mixed Mode authentication mechanism to store the System Administrator (sa) account password in plaintext in a log file, which is accessible to any user.
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, known as the 'Malformed Windows Media Encoder Request' vulnerability.
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter.
The undocumented semconfig system call in BSD freezes the state of semaphores, allowing local users to cause a denial of service of the semaphore system.
Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option.
NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU.
The ftpd function in NetBSD 1.4.2 improperly parses entries in /etc/ftpchroot, preventing chroot from being applied to specified users. As a result, users can access files outside of their home directory.