CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.17)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Livingston portmaster machines could be rebooted via a series of commands.
Some configurations of NIS+ in Linux allowed attackers to log in as the user '+'.
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
The SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files, potentially leading to privilege escalation.
Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.
Predictable TCP sequence numbers allow for connection spoofing.
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
Vulnerability in Support Watch (also known as SupportWatch) in HP-UX versions 8.0 through 9.0 allows local users to gain elevated privileges.
The serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, allowing local users to gain root privileges via a Trojan horse ls program.
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
The passwd program in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
Extra long export lists over 256 characters in some mount daemons allow NFS directories to be mounted by anyone.
Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.
The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
The LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges.
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
HP ypbind allows attackers with root privileges to modify NIS data.
In SunOS, NFS file handles could be guessed, leading to unauthorized access to the exported file system.