CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Debian GNU/Linux 2.1 has an issue with restoring symlinks, allowing a local user to modify the ownership of arbitrary files.
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious WPAD server.
Insecure directory permissions in RPM distribution for PostgreSQL allow local users to gain privileges by reading a plaintext password file.
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
The default permissions for Endymion MailMan allow local users to read email or modify files.
Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
A vulnerability in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
Buffer overflow in the FreeBSD gdc program may lead to unauthorized access or execution of malicious code.
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
A vulnerability in FreeBSD seyon allows users to gain elevated privileges via a modified PATH variable used for locating the xterm and seyon-emu commands.
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
CVE-1999-0846 affects MDaemon 2.7 and involves a denial of service attack that can be executed through a large number of connection attempts.
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
ZBServer Pro allows remote attackers to read source code for executable files by inserting a dot (.) into the URL.
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
Buffer overflow in FreeBSD angband allows local users to gain privileges.
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
Buffer overflow in RSAREF2 occurs via the encryption and decryption functions in the RSAREF library.
The mount_union command in FreeBSD allows local users to gain root privileges via a symlink attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS