CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
wwwisis version 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.
Buffer overflow in newt.c of newt windowing library (libnewt) version 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt.
The nslookup.pl CGI script version 1.0 for Linux Directory Penguin allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.
Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.
PHPNetToolpack version 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.
Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allow remote attackers to execute arbitrary code. These issues affect the address_match() function in mystring.c and other functions in tolist.c.
Buffer overflows in fpexec in mod_frontpage before version 1.6.1 may allow attackers to gain root privileges.
Vulnerability in PureTLS before version 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions.
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.
Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.
Ethereal versions 0.9.4 and earlier contain buffer overflow vulnerabilities that can be exploited by remote attackers to cause denial of service or execute arbitrary code.
Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument.
Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument.
The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted. This could remove an escape character from the query, making the application subject to SQL injection attacks.
Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
CVE-2002-0796 describes a format string vulnerability in the logging component of snmpdx for Solaris versions 5.6 through 8, allowing remote attackers to gain root privileges.
CVE-2002-0756 is a cross-site scripting vulnerability in the authentication page for Webmin 0.96 and Usermin 0.90, allowing remote attackers to inject scripts into an error page.
CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.
Buffer overflow in uucp in AIX 4.3.3 may lead to unauthorized access or execution of malicious code.
The mail and mailx programs in AIX 4.3.3 generate a core dump when called with a very long argument, indicating a buffer overflow.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS