CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
WWWBoard has a default username and default password, which poses a risk of unauthorized access.
WWWBoard stores encrypted passwords in a password file that is under the web root, making it accessible to remote attackers.
sccw allows local users to read arbitrary files.
The Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, such as telnet.
The dtspcd daemon in CDE allows local users to execute arbitrary commands via a symlink attack.
The vulnerability in guestbook.pl involves improper cleansing of user-inserted SSI commands, allowing remote attackers to execute arbitrary commands.
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
The ToolTalk ttsession daemon uses weak RPC authentication, allowing a remote attacker to execute commands.
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
Buffer overflow in the Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch may lead to unauthorized access.
Computalynx CMail SMTP servers version 2.4 and 2.3 SP2 are vulnerable to a buffer overflow attack in the MAIL FROM command, which may allow a remote attacker to execute arbitrary code on the server.
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, known as the 'ImportExportFavorites' vulnerability.
Kodak/Wang ActiveX controls for Internet Explorer 4.01 and 5.0 are marked as 'Safe for Scripting', allowing remote attackers to create and modify files and execute arbitrary commands.
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could lead to it being cached by a proxy and inadvertently used by a different user.
SCO Doctor allows local users to gain root privileges through a Tools option.
The vulnerability in download.cgi version 1.0 allows remote attackers to read arbitrary files by exploiting the .. (dot dot) sequence in the f parameter.