CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
O'Reilly WebSite 1.1e and Website Pro 2.0 allow remote attackers to execute arbitrary commands via shell metacharacters in an argument to args.cmd or args.bat.
Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
The cfengine package in Debian GNU/Linux is susceptible to a symlink attack.
Vulnerability in the edauth command of Compaq Tru64 UNIX may allow unauthorized users to gain access to the system.
mSQL (Mini SQL) version 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
Multilink PPP for ISDN dialup users in Ascend before version 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier.
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted after installation.
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
FileSystemObject (FSO) in the showfile.asp script allows remote attackers to read arbitrary files by specifying their names in the file parameter.
In Sun Solaris and SunOS, vulnerabilities in the man and catman programs allow overwriting arbitrary files.
The vulnerability in rpc.pcnfsd on HP systems allows remote root access by changing permissions on the main printer spool directory.
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD can lead to remote root access.
The netstat command in NetBSD allows local users to access kernel memory.
A race condition in the db_loader program in ClearCase allows local users to gain root access by setting SUID bits.
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, due to a problem with a null NT hash value.
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
Nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS