CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the 'sioux' vulnerability.
The Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
The WINS server in Microsoft Windows NT 4.0 before SP4 is vulnerable to an attack that can lead to denial of service by sending invalid UDP frames to port 137. Attackers can exploit this vulnerability by flooding the server with random packets.
Netscape Enterprise servers may expose files through the PageServices query.
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
The SNMP community name is guessable, which can lead to unauthorized access to network devices.
NT users can gain debug-level access on a system process using the Sechole exploit.
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
Eudora and Eudora Light before version 3.05 allow remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as dates before 1970 or dates that are 100 years after the current date.
The dumpreg program in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, allowing local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
The Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
Buffer overflow in the ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names.
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed 'EXPN *@' command.
NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, allowing remote attackers to modify the switch's configuration.
A vulnerability has been identified that allows arbitrary command execution via a buffer overflow in the IMAP authenticate command.
The vulnerability in Solaris SUNWadmap allows for root access.