CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Power management on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, allowing an attacker with physical access to input characters to the last active application for a short period after the system is restoring.
The vulnerability in Solaris SUNWadmap allows for root access.
Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port.
libnsl in Solaris allows an attacker to perform a denial of service on rpcbind.
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key.
The 'established' command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed. This can lead to administrators configuring less restrictive access controls than intended if they do not understand this functionality.
HP JetAdmin version D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
Slackware Linux versions 3.2 through 3.5 do not properly check for the presence of the /etc/group file. When it is missing, the system fails to drop privileges, resulting in root privileges being assigned to any local user logging onto the server.
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users.
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
Ray Chan WWW Authorization Gateway version 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the 'user' parameter.
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via 'long input strings.'
StarTech's POP3 proxy server and telnet server allow remote attackers to cause a denial of service via a long USER command.
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
CVE-1999-0494 is a denial of service vulnerability in the WinGate proxy due to a buffer overflow in the POP3 protocol.
A vulnerability in SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.