CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus versions 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter.
An unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).
Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
A double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
Multiple buffer overflows in various protocol dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Multiple format string vulnerabilities in the DHCP and ANSI A dissectors in Ethereal before version 0.10.11 may allow remote attackers to execute arbitrary code.
In Mac OS X 10.3.9, the Bluetooth file exchange service is enabled by default, allowing remote attackers to access files without user notification, and local users to access files via the default directory.
Vulnerability in Apple Help Viewer 2.0.7 and 3.0.0 on Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scripts with less restrictive privileges via a help:// URI.
Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.
The vulnerability in index.php of Zorum 3.5 allows a remote attacker to trigger an SQL error and potentially inject arbitrary SQL commands via the search functionality.
In Mac OS X 10.3.9, an unknown vulnerability in chfn, chpass, and chsh programs uses external helper programs in an insecure manner, allowing local users to gain privileges.
The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.
The BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.
Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (Server_id) argument.
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the username or password parameters to admin_login.asp, or the searchstring and possibly ID parameters to default.asp.
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.
PHP remote file inclusion vulnerability in main.php of osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.
Open WebMail (OWM) before version 2.51 dated 2005-04-30 allows remote authenticated users to execute arbitrary commands by including shell metacharacters in a filename.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS