CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.07)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Novell eDirectory versions 8.6.2 and 8.7 use case insensitive passwords, making it easier for remote attackers to conduct brute force password guessing.
The register.php file in Ultimate PHP Board (UPB) 1.0 and 1.0b allows a remote attacker to impersonate the administrator by registering an account name of 'admin' with a lowercase 'a,' while the administrative account is 'Admin' with an uppercase 'A.'
MidiCart PHP, PHP Plus, and PHP Maxi allow remote attackers to upload arbitrary PHP files via a direct request to admin/upload.php or access sensitive information via a direct request to admin/credit_card_info.php.
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code. These issues occur during user name canonicalization, during LDAP authentication, and due to an off-by-one error in the log writer.
Integer overflow in the xdr_array function in RPC servers for operating systems using libc, glibc, or other code based on SunRPC, including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
Pingtel xpressa SIP-based VoIP phones versions 1.2.5 to 1.2.7.4 download phone applications from a website but cannot verify their integrity. This could allow remote attackers to install malicious applications via DNS spoofing.
Integer overflow in sshd in OpenSSH versions 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication when OpenSSH is using SKEY or BSD_AUTH authentication.
Off-by-one error in the channel code of OpenSSH from version 2.0 to 3.0.2 allows local users or remote malicious servers to gain privileges.
The decompression algorithm in zlib 1.1.3 and earlier causes inflateEnd to release certain memory more than once, which may allow attackers to execute arbitrary code via malformed compression data.
There is an off-by-one buffer overflow in the Basic Authentication mechanism in thttpd from Acme Labs versions 1.95 through 2.20. This can lead to denial of service and potentially allow remote attackers to execute arbitrary code.
Xitami versions 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, which has default world-readable permissions.
Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, allowing remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.
Knox Arkeia server version 4.2, and possibly other versions, uses a constant salt when encrypting passwords with the crypt() function, making it easier for attackers to conduct brute force password guessing.
TCP Wrappers in FreeBSD versions 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.
CVE-2001-0609 describes a format string vulnerability in Infodrom cfingerd version 1.4.3 and earlier, allowing a remote attacker to gain additional privileges via a malformed ident reply passed to the syslog function.
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, making it easier to break into the server via brute force password guessing.
Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing.
Heap overflow in the FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
Buffer overflow in the FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.