CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass desktop protection. This can be achieved by using <CTRL><ALT><DEL> to kill processes in the task manager, booting the system from a separate disk, or interrupting certain processes during system boot.
An account on a router, firewall, or other network device has a default, null, blank, or missing password.
The SGI mediad program allows local users to gain root access.
In IIS, remote attackers can obtain source code for ASP files by appending '::$DATA' to the URL.
A Unix account has a guessable password.
xosview version 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
Vulnerability in diskalign and diskperf in IRIX 6.4 patches 2291 and 2848 allows a local user to create root-owned files leading to a root compromise.
Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges.
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable.
Vulnerability in the man.sh CGI script, included in the May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands.
Buffer overflows in Sun libnsl can lead to root access to the system.
US Robotics/3Com Total Control Chassis with Frame Relay between versions 3.6.22 and 3.7.24 does not properly enforce access filters when the 'set host prompt' setting is made for a port, allowing attackers to bypass restrictions by providing the hostname twice at the 'host: ' prompt.
Check Point Firewall-1 does not properly handle certain restricted keywords in user-defined objects, which could produce a rule with a default 'ANY' address.
A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) are vulnerable to denial of service attacks. Remote attackers can send a flood of malformed packets, causing the server to slow down and fill the event logs with error messages.
In Solaris 2.6 HW3/98, the admintool is installed with world-writable permissions, allowing local users to gain privileges by replacing it with a Trojan horse program.
Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.
There is a buffer overflow in xterm and Xaw on SGI IRIX that allows root access.