CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch may lead to unauthorized access.
The vulnerability in guestbook.pl involves improper cleansing of user-inserted SSI commands, allowing remote attackers to execute arbitrary commands.
The ToolTalk ttsession daemon uses weak RPC authentication, allowing a remote attacker to execute commands.
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
The dtspcd daemon in CDE allows local users to execute arbitrary commands via a symlink attack.
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
Computalynx CMail SMTP servers version 2.4 and 2.3 SP2 are vulnerable to a buffer overflow attack in the MAIL FROM command, which may allow a remote attacker to execute arbitrary code on the server.
Kodak/Wang ActiveX controls for Internet Explorer 4.01 and 5.0 are marked as 'Safe for Scripting', allowing remote attackers to create and modify files and execute arbitrary commands.
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could lead to it being cached by a proxy and inadvertently used by a different user.
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, known as the 'ImportExportFavorites' vulnerability.
SCO Doctor allows local users to gain root privileges through a Tools option.
The vulnerability in download.cgi version 1.0 allows remote attackers to read arbitrary files by exploiting the .. (dot dot) sequence in the f parameter.
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
Nosque MsgCore 2.14 stores passwords in cleartext, potentially allowing local users to gain privileges. The administrator password is stored in the AdmPasswd registry key, and user passwords in the Userbase.dbf data file.
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
gFTP FTP client version 1.13 and earlier versions before 2.0.0 records a password in plaintext in (1) the log window, or (2) in a log file.
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.