CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.13)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The SGI permissions program allows local users to gain root privileges.
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
CVE-1999-0216 vulnerability affects the inetd service on Linux, which can be targeted for denial of service (DoS) attacks through SYN and RST packets.
The SGI syserr program allows local users to corrupt files.
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters, such as a pipe character.
The open() function in FreeBSD allows local attackers to write to arbitrary files.
The piodmgrsu command in AIX allows local users to gain additional group privileges.
Various vulnerabilities in the AIX portmir command allow local users to obtain root access.
The nslookup command in AIX allows local users to gain root access due to improper privilege management.
Buffer overflow in the writesrv command of AIX allows local users to gain root access.
Buffer overflow in AIX libDtSvc library can allow local users to gain root access.
Buffer overflow in the OSF Distributed Computing Environment (DCE) security daemon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization.
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command.
Buffer overflow in AIX xdat gives local users root access.
The mylog script in CGI PHP allows an attacker to read any file on the target server.
Buffer overflow in the telnet daemon in the tgetent function allows remote attackers to gain root access via the TERMCAP environmental variable.
The CGI PHP mlog script allows an attacker to read any file on the target server.
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, leading to a core dump that may contain sensitive password information.
A vulnerability in the sort tool allows local users to modify arbitrary files writable by the user running sort by creating temporary files and following symbolic links.
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS