CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the 'Spoofed Route Pointer' vulnerability.
CVE-1999-0886 vulnerability affects RASMAN, allowing users to point to an alternate location via the Windows NT Service Control Manager.
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
WWWBoard stores encrypted passwords in a password file that is under the web root, making it accessible to remote attackers.
WWWBoard has a default username and default password, which poses a risk of unauthorized access.
The Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, such as telnet.
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
The vulnerability in guestbook.pl involves improper cleansing of user-inserted SSI commands, allowing remote attackers to execute arbitrary commands.
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
The dtspcd daemon in CDE allows local users to execute arbitrary commands via a symlink attack.
The ToolTalk ttsession daemon uses weak RPC authentication, allowing a remote attacker to execute commands.
Computalynx CMail SMTP servers version 2.4 and 2.3 SP2 are vulnerable to a buffer overflow attack in the MAIL FROM command, which may allow a remote attacker to execute arbitrary code on the server.
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, known as the 'ImportExportFavorites' vulnerability.
SCO Doctor allows local users to gain root privileges through a Tools option.
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
A buffer overflow in TenFour TFS Gateway SMTP mail server version 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS