CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A stack-based buffer overflow in MySQL 4.1.x before 4.1.3 and 5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.
Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory. These are different vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.
SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.
Vulnerability in osTicket allows remote attackers to view sensitive uploaded files and potentially execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.
Vulnerability in FreeS/WAN 1.x and 2.x and related products (superfreeswan 1.x, openswan before 1.0.6 and 2.1.4, strongSwan before 2.1.3) allows remote attackers to authenticate using spoofed PKCS#7 certificates. A self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
An unknown vulnerability in the 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication through repeated login attempts using any username and password.
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file.
PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code.
A vulnerability in Mailreader.com 2.3.30 and 2.3.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.
CVE-2004-0448 describes a vulnerability in the log function for jftpgw version 0.13.4 and earlier, allowing remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.
The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, allowing local users to execute arbitrary commands via shell metacharacters in a system call.
CVE-2004-0393 describes a format string vulnerability in the msg function for the rlpr daemon (rlprd) version 2.0.4, allowing remote attackers to execute arbitrary code via format string specifiers in a buffer that cannot be resolved, which is passed to the syslog function.
Buffer overflow in cgi.c in www-sql before version 0.5.7 allows local users to execute arbitrary code via a web page processed by www-sql.
Buffer overflow in the msg function for rlpr daemon (rlprd) version 2.04 allows local users to execute arbitrary code.
The vulnerability in Apache for Apple Mac OS X 10.2.8 and 10.3.6 stems from a case sensitivity mismatch between the server and the HFS+ filesystem. Apache restricts access to files only with exact case matching, while HFS+ treats them case-insensitively, allowing attackers to bypass restrictions.
Multiple buffer overflows in Oracle 9i before version 9.2.0.3 allow local users to execute arbitrary code. This can be achieved by setting the TIME_ZONE session parameter to a long value or providing long parameters to the NUMTOYMINTERVAL, NUMTODSINTERVAL, or FROM_TZ functions.
The Postfix server in Apple Mac OS X 10.3.6, when using CRAM-MD5 authentication, allows remote attackers to send mail without authentication by replaying captured authentication information.
Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.
Buffer overflow vulnerability in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS