CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The soundplayer program in IRIX allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.
NetWare NFS mode 1 and 2 implements the 'Read Only' flag in Unix by changing the ownership of a file to root, allowing local users to gain root privileges by creating a setuid program and setting it to 'Read Only.'
The automatic download option in the ncftp 2.4.2 FTP client on Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files to be downloaded.
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, known as the Excel 'CALL Vulnerability.'
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.
The BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.
A vulnerability in Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.
Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
The ip_input.c file in BSD-derived TCP/IP implementations contains a vulnerability that allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
Buffer overflow in the UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
The nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.
The AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
The SMS Remote Control program is installed with insecure permissions, allowing local users to gain privileges by modifying or replacing the program.
Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service.
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the 'rm' program, which allows local users to execute arbitrary commands.
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS