CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
The install.iss installation script for Internet Security Scanner (ISS) version 5.3 for Linux allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.
The Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, allowing local users to easily decrypt the passwords and gain privileges.
Buffer overflow in the Linux autofs module due to long directory names allows local users to perform a denial of service attack.
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges.
SVGAlib zgv version 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
The nsralist program in Digital Unix Networker has a buffer overflow that allows local users to gain root privileges.
In IIS and other web servers, an attacker can execute commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
The xtvscreen program in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
A buffer overflow in lsof allows local users to obtain root privilege.
Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
The snap command in AIX before version 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear it when snap -a is executed. This could allow local users to access the password file.
Buffer overflow in Tetrix TetriNet daemon version 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname.
A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
O'Reilly WebSite 1.1e and Website Pro 2.0 allow remote attackers to execute arbitrary commands via shell metacharacters in an argument to args.cmd or args.bat.
Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
The cfengine package in Debian GNU/Linux is susceptible to a symlink attack.
mSQL (Mini SQL) version 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.