CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The AIX Packet Filtering Module (genfilt) does not properly filter traffic to destination ports greater than 32767, which may lead to unauthorized access.
The Zeus web server administrative interface uses weak encryption for storing passwords.
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
The ikeyman tool in IBM WebSphere uses weak encryption to store a password for a key database used for SSL connections.
ypserv allows local administrators to modify password tables.
ypserv allows a local user to modify the GECOS and login shells of other users.
Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.
Linux kernel before 2.3.18 or 2.2.13pre15 with SLIP and PPP options allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.
Cdwtools version 093 and earlier allows local users to gain root privileges via the /tmp directory.
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
Buffer overflows in cdwtools 093 and earlier allow local users to gain root privileges.
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
CVE-1999-0905 affects the Axent Raptor firewall, which is vulnerable to a denial of service (DoS) attack via malformed zero-length IP options.
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, known as the 'Virtual Machine Verifier' vulnerability.
Firewall-1 does not properly restrict access to LDAP attributes, which may lead to unauthorized access to sensitive information.
A vulnerability in Gauntlet 5.0 BSDI allows remote attackers to bypass firewall access restrictions when BSDI patches are installed in a specific order.
The ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) by sending malformed packets to the server's UDP port.
Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
The HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of '.' characters.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS