CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Pedestal Software Integrity Protection Driver (IPD) version 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel. Attackers can use the NtCreateSymbolicLinkObject function to create a symbolic link to physical memory or a drive letter.
A double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.
Buffer overflow in the defang function in libhttpd.c for thttpd versions 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests containing '<' or '>' characters, which trigger the overflow when the characters are expanded to '<' and '>' sequences.
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
An off-by-one error in the fb_realpath() function may allow attackers to execute arbitrary code. The issue affects wu-ftpd versions 2.5.0 to 2.6.2 when commands cause pathnames to exceed MAXPATHLEN, leading to a buffer overflow.
Off-by-one error in the xlog function of mountd in the nfs-utils package before version 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via various dissectors.
The LDAP name service in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems via a request for a URL that specifies the target IP address and port.
The register.php file in Ultimate PHP Board (UPB) 1.0 and 1.0b allows a remote attacker to impersonate the administrator by registering an account name of 'admin' with a lowercase 'a,' while the administrative account is 'Admin' with an uppercase 'A.'
An off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
MidiCart PHP, PHP Plus, and PHP Maxi allow remote attackers to upload arbitrary PHP files via a direct request to admin/upload.php or access sensitive information via a direct request to admin/credit_card_info.php.
Novell eDirectory versions 8.6.2 and 8.7 use case insensitive passwords, making it easier for remote attackers to conduct brute force password guessing.
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code. These issues occur during user name canonicalization, during LDAP authentication, and due to an off-by-one error in the log writer.
Integer overflow in the xdr_array function in RPC servers for operating systems using libc, glibc, or other code based on SunRPC, including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
Pingtel xpressa SIP-based VoIP phones versions 1.2.5 to 1.2.7.4 download phone applications from a website but cannot verify their integrity. This could allow remote attackers to install malicious applications via DNS spoofing.
Integer overflow in sshd in OpenSSH versions 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication when OpenSSH is using SKEY or BSD_AUTH authentication.
Off-by-one error in the channel code of OpenSSH from version 2.0 to 3.0.2 allows local users or remote malicious servers to gain privileges.
The decompression algorithm in zlib 1.1.3 and earlier causes inflateEnd to release certain memory more than once, which may allow attackers to execute arbitrary code via malformed compression data.
Xitami versions 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, which has default world-readable permissions.