CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CardBoard 2.4 is a CGI script for sending greeting cards that allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
Autogalaxy stores usernames and passwords in cleartext in cookies, making it easier for remote attackers to obtain authentication information.
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename.
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string.
Buffer overflow in HttpSaveCVP.dll and HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
Lotus Notes R5 Client version 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter.
Pathways Homecare 6.5 uses weak encryption for user names and passwords, allowing local users to gain privileges by recovering passwords from the pwhc.ini file.
Java Runtime Environment (JRE) and SDK versions 1.2 through 1.3.0_04 allow untrusted applets to access the system clipboard.
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT allows remote attackers to execute arbitrary code via a certain configuration parameter.
A format string vulnerability in libvanessa_logger version 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
The SpeedXess HA-120 DSL router has a default administrative password of 'speedxess', allowing remote attackers to gain access.
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS versions 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
Buffer overflows in DayDream BBS versions 2.9 through 2.13 may allow remote attackers to execute arbitrary code via specific control codes.
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
Buffer overflow in VanDyke SecureCRT before version 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long username or password.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS