CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the Amanda backup system used in various UNIX operating systems allows runtar to execute tar with root privileges. A user can overwrite or read arbitrary files by providing target files to runtar.
Internet Explorer 4.x and 5.x in conjunction with Word 97 allows arbitrary execution of Visual Basic programs on the IE client through the Word 97 template, which does not warn the user that it contains executable content. This vulnerability also applies to Outlook when the client views a malicious email message.
Buffer overflow in Skyfull mail server occurs when processing the MAIL FROM command.
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
The AIX Packet Filtering Module (genfilt) does not properly filter traffic to destination ports greater than 32767, which may lead to unauthorized access.
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
The ikeyman tool in IBM WebSphere uses weak encryption to store a password for a key database used for SSL connections.
Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.
ypserv allows a local user to modify the GECOS and login shells of other users.
ypserv allows local administrators to modify password tables.
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
Buffer overflows in cdwtools 093 and earlier allow local users to gain root privileges.
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, known as the 'Virtual Machine Verifier' vulnerability.
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
Firewall-1 does not properly restrict access to LDAP attributes, which may lead to unauthorized access to sensitive information.
A vulnerability in Gauntlet 5.0 BSDI allows remote attackers to bypass firewall access restrictions when BSDI patches are installed in a specific order.
Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.
The PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, allowing users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.
The Auto_FTP.pl script in Auto_FTP version 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS