CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple buffer overflows in Gringotts 0.5.9 allow local users to execute arbitrary commands via unknown attack vectors.
Unspecified security vulnerability in Baby FTP Server versions before November 7, 2002, with unknown impact and attack vectors.
CVE-2002-2200 affects Benjamin Lefevre Dobermann FORUM version 0.5 and earlier, allowing remote attackers to remotely include and execute malicious PHP files via the 'subpath' variable in entete.php, enteteacceuil.php, index.php, or newtopic.php.
Dispair versions 0.1 and 0.2 allow remote attackers to execute arbitrary shell commands via certain form fields.
PGP versions 6.x and 7.x do not clear alternate data streams on NTFS file systems, allowing attackers to recover sensitive information that was supposed to be deleted.
SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 do not clear alternate data streams on NTFS file systems, allowing attackers to recover sensitive information that was supposed to be deleted.
Buffer overflow in axspawn.c in Axspawn-pam before version 0.2.1a allows remote attackers to execute arbitrary code via large packets.
The graph.php file in Ganglia PHP RRD Web Client version 1.0.2 has a vulnerability that allows remote attackers to execute arbitrary commands via the command parameter passed to the passthru function.
Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.
Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allows remote attackers to execute arbitrary code via a long DCC Chat message.
Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.
SQL injection vulnerability in 123tkShop before version 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs, including function_describe_item1.inc.php.
Virgil CGI Scanner version 0.9 allows remote attackers to execute arbitrary commands via the tar (TARGET) or zielport (ZIELPORT) parameters.
Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1, and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.
phpShare versions before 0.6 beta 3 allow remote attackers to include and execute arbitrary PHP scripts from remote servers.
Nagios versions 1.0b1 through 1.0b3 allow remote attackers to execute arbitrary commands via shell metacharacters in plugin output.
The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument.
The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, allowing remote attackers to access the file system as root.
Microsoft SQL Server versions 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), allowing remote attackers to sniff and decrypt passwords.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS