CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the Event_ID parameter to (1) defer.asp or (2) details.asp.
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus versions 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter.
An unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).
Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
Multiple format string vulnerabilities in the DHCP and ANSI A dissectors in Ethereal before version 0.10.11 may allow remote attackers to execute arbitrary code.
Multiple buffer overflows in various protocol dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
A double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.
The vulnerability in index.php of Zorum 3.5 allows a remote attacker to trigger an SQL error and potentially inject arbitrary SQL commands via the search functionality.
In Mac OS X 10.3.9, an unknown vulnerability in chfn, chpass, and chsh programs uses external helper programs in an insecure manner, allowing local users to gain privileges.
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.
Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.
In Mac OS X 10.3.9, the Bluetooth file exchange service is enabled by default, allowing remote attackers to access files without user notification, and local users to access files via the default directory.
Vulnerability in Apple Help Viewer 2.0.7 and 3.0.0 on Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scripts with less restrictive privileges via a help:// URI.
Unknown vulnerability in the serendipity_config_local.inc.php file in Serendipity before version 0.8. The impact details are unknown.
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to perform administrator operations and cause a denial of service (server or camera shutdown) via a direct request to admin.html.
SQL injection vulnerability in search.php in PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
The media manager in Serendipity before version 0.8 allows remote attackers to upload and execute arbitrary .php or .shtml files.
Vulnerability in PostgreSQL versions 7.3.x through 8.0.x grants public EXECUTE access to certain character conversion functions, allowing unprivileged users to call these functions with malicious values, with unknown impact.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS