CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
Linux kernel versions 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, leading to a denial of service.
A vulnerability in the Cisco IOS web server allows attackers to remotely reboot the router by sending a long URL.
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
The syslogd service in Solaris crashes when receiving a message from a host that does not have an inverse DNS entry.
The default permissions of /dev/kmem in Linux versions before 2.0.36 allow IP spoofing.
Netmanager Chameleon SMTPd has several buffer overflow vulnerabilities that can cause system crashes.
MC/ServiceGuard and MC/LockManager in HP-UX allow local users to gain privileges through SAM.
Versions super 3.11.6 and others have a buffer overflow in the syslog utility, allowing a local user to gain root access.
SLMail versions 3.1 and 3.2 allow local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
CVE-1999-0483 vulnerability affects OpenBSD, which can crash due to the use of nlink value in FFS and EXT2FS filesystems.
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, posing a risk of sensitive information disclosure.
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
Buffer overflow in the OpenBSD ping tool may lead to unauthorized access or system crashes.
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
Remote attackers can perform a denial of service on WinGate machines using a buffer overflow in the Winsock Redirector Service.
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
ARCserve NT agents use weak encryption (XOR) for passwords, allowing remote attackers to sniff the authentication request to port 6050 and decrypt the password.