CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, allowing remote attackers to access the configuration via the GET_CONFIG command.
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
pcAnywhere versions 8.x and 9.0 are vulnerable to a denial of service attack that can be executed by remote attackers via a TCP SYN scan, for example using nmap.
Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, allowing remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
mail.local in Sendmail 8.10.x does not properly identify the . string which indicates the end of message text. This allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in . .
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
IMP does not remove files properly if the MSWordView application quits, allowing local users to cause a denial of service by filling up disk space by requesting a large number of documents and prematurely stopping the request.
Qpopper versions 2.53 and 3.0 improperly identify the string that marks the end of message text. This allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in .
Cisco IOS versions 11.x and 12.x allow remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready, resulting in a system reboot.
Cisco Catalyst 5.4.x allows a user to gain access to the 'enable' mode without a password.
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable.
The Adtran MX2800 M13 Multiplexer is vulnerable to a denial of service attack that can be executed remotely via a ping flood to the Ethernet interface, causing the device to crash.
The read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, allowing an attacker to read unencrypted passwords.
HP asecure creates the Audio Security File audio.sec with insecure permissions, allowing local users to cause a denial of service or gain additional privileges.
Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
The dansie shopping cart application (cart.pl) allows remote attackers to access the shopping cart database and configuration information via a URL referencing the env, db, or vars form variables.