CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.
AN-HTTPd provides example CGI scripts that allow remote attackers to execute commands via shell metacharacters.
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
Buffer overflow in the Xsco command of SCO UnixWare caused by a long argument.
A vulnerability in the Amanda backup system used in various UNIX operating systems allows runtar to execute tar with root privileges. A user can overwrite or read arbitrary files by providing target files to runtar.
Internet Explorer 4.x and 5.x in conjunction with Word 97 allows arbitrary execution of Visual Basic programs on the IE client through the Word 97 template, which does not warn the user that it contains executable content. This vulnerability also applies to Outlook when the client views a malicious email message.
Buffer overflow in Skyfull mail server occurs when processing the MAIL FROM command.
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
The AIX Packet Filtering Module (genfilt) does not properly filter traffic to destination ports greater than 32767, which may lead to unauthorized access.
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
The ikeyman tool in IBM WebSphere uses weak encryption to store a password for a key database used for SSL connections.
ypserv allows a local user to modify the GECOS and login shells of other users.
Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.
ypserv allows local administrators to modify password tables.
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
Buffer overflows in cdwtools 093 and earlier allow local users to gain root privileges.
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, known as the 'Virtual Machine Verifier' vulnerability.
Firewall-1 does not properly restrict access to LDAP attributes, which may lead to unauthorized access to sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS