CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in guestbook.pl involves improper cleansing of user-inserted SSI commands, allowing remote attackers to execute arbitrary commands.
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
Computalynx CMail SMTP servers version 2.4 and 2.3 SP2 are vulnerable to a buffer overflow attack in the MAIL FROM command, which may allow a remote attacker to execute arbitrary code on the server.
Kodak/Wang ActiveX controls for Internet Explorer 4.01 and 5.0 are marked as 'Safe for Scripting', allowing remote attackers to create and modify files and execute arbitrary commands.
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could lead to it being cached by a proxy and inadvertently used by a different user.
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, known as the 'ImportExportFavorites' vulnerability.
The vulnerability in download.cgi version 1.0 allows remote attackers to read arbitrary files by exploiting the .. (dot dot) sequence in the f parameter.
SCO Doctor allows local users to gain root privileges through a Tools option.
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
Nosque MsgCore 2.14 stores passwords in cleartext, potentially allowing local users to gain privileges. The administrator password is stored in the AdmPasswd registry key, and user passwords in the Userbase.dbf data file.
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
gFTP FTP client version 1.13 and earlier versions before 2.0.0 records a password in plaintext in (1) the log window, or (2) in a log file.
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
A buffer overflow in TenFour TFS Gateway SMTP mail server version 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
The Compaq Integration Maintenance Utility in versions prior to SmartStart 4.50 modifies the legal notice caption and text in Windows NT, which could lead to a violation of security policy.
Buffer overflow in Netscape Communicator occurs via EMBED tags in the pluginspage option.
FreeBSD 3.2 and possibly other versions allow a local user to cause a denial of service (panic) by accessing an NFS v3 mounted directory from a large number of processes.
The Eyedog ActiveX control is marked as 'safe for scripting' for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Buffer overflow in the inews program in INN may lead to unauthorized access or execution of malicious code.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS