CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.05)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered on the D-Link DWR-932B router related to undocumented TELNET and SSH services that allow logins as admin with the password 'admin' and as root with the password '1234'.
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL. There is also an apply_noauth.cgi URL that enables unauthenticated users to perform sensitive actions on the device.
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number can be used to obtain the administrator username and password in conjunction with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.
Router NETGEAR WNR2000v5 zawiera przepełnienie bufora w parametrze hidden_lang_avi podczas wywoływania adresu URL /apply.cgi?/lang_check.html. To przepełnienie bufora może być wykorzystane przez nieautoryzowanego atakującego do zdalnego wykonania kodu.
The ISO CLNS parser in tcpdump before version 4.9.0 has a buffer overflow in the clnp_print() function in print-isoclns.c.
The ISO CLNS parser in tcpdump before version 4.9.0 has a buffer overflow in the lookup_nsap() function in addrtoname.c.
The ATM parser in tcpdump before version 4.9.0 has a buffer overflow in function print-atm.c:sig_print().
The SNMP parser in tcpdump before version 4.9.0 has a buffer overflow in the asn1_parse() function in print-snmp.c.
The Q.933 parser in tcpdump before version 4.9.0 has a buffer overflow in print-fr.c:q933_print(). This is a different vulnerability than CVE-2016-8575.
In tcpdump before version 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN, and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().
The OTV parser in tcpdump before version 4.9.0 has a buffer overflow in the otv_print() function.
The ISAKMP parser in tcpdump before version 4.9.0 has a buffer overflow in the ikev2_e_print() function in print-isakmp.c.
The IPv6 parser in tcpdump before version 4.9.0 has a buffer overflow in the ip6_print() function in print-ip6.c.
The BOOTP parser in tcpdump before version 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
The ISO CLNS parser in tcpdump before version 4.9.0 has a buffer overflow in the clnp_print() function in print-isoclns.c.
The Q.933 parser in tcpdump before version 4.9.0 has a buffer overflow in print-fr.c:q933_print(), which is a different vulnerability than CVE-2017-5482.
The FRF.15 parser in tcpdump before version 4.9.0 has a buffer overflow in print-fr.c:frf15_print().
A bug in util-print.c:relts_print() in tcpdump before version 4.9.0 could lead to a buffer overflow in multiple protocol parsers, including DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, and PIM.
The Classical IP over ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the cip_if_print() function in print-cip.c.
The GeoNetworking parser in tcpdump before version 4.9.0 has a buffer overflow in print-geonet.c in multiple functions.