CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
The vulnerability in FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the 'Spoofed Route Pointer' vulnerability.
The SSH authentication agent follows symlinks via a UNIX domain socket.
CVE-1999-0886 vulnerability affects RASMAN, allowing users to point to an alternate location via the Windows NT Service Control Manager.
WWWBoard stores encrypted passwords in a password file that is under the web root, making it accessible to remote attackers.
sccw allows local users to read arbitrary files.
WWWBoard has a default username and default password, which poses a risk of unauthorized access.
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
The Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, such as telnet.
Buffer overflow in the Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch may lead to unauthorized access.
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
The dtspcd daemon in CDE allows local users to execute arbitrary commands via a symlink attack.
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
The ToolTalk ttsession daemon uses weak RPC authentication, allowing a remote attacker to execute commands.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS