CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
Buffer overflow in the FTP client in the Debian GNU/Linux netstd package may lead to unauthorized access or execution of malicious code.
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.
Buffer overflow in the BOOTP server in the Debian Linux netstd package.
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the 'flags' registry key to 1920.
Version 1.5.3 of wget follows symlinks, leading to permission changes on the target file instead of the symlink itself.
The default configuration of Slackware 3.4, and possibly other versions, includes '.' (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.
The aserver program in HP-UX allows local users to gain elevated privileges via a symlink attack.
Off-by-one error in NcFTPd FTP server before version 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
A trust relationship exists between two Unix hosts, which may lead to unauthorized access to resources.
Two or more Unix accounts have the same user identifier (UID), which can lead to authorization and resource access issues.
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using tools such as nmap or queso.
mSQL version 2.0.1 and below allows remote code execution through a buffer overflow.
The netstat service is running, which allows remote attackers to obtain sensitive information.
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
The Java Web Server allowed remote users to obtain the source code for CGI programs.