CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
mSQL version 2.0.1 and below allows remote code execution through a buffer overflow.
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using tools such as nmap or queso.
SSH version 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
mysqld in MySQL 3.21 creates log files with world-readable permissions, allowing local users to obtain passwords for users in the user database.
Linux versions 2.1.132 and earlier allow local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.
Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program.
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via nlog-smb.pl or rpc-nlog.pl.
The BackWeb client stores the username and password in cleartext in the Communication registry key, which could allow other local users to gain privileges by reading the password.
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, allowing local users to modify Word Perfect behavior by editing files in the working directory or to modify other users' files via a symlink attack.
The passwd command in Solaris can be subjected to a denial of service attack.
Buffer overflow in mkcookie for Solaris x86 allows local users to obtain root access.
The RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, allowing local users to gain administrator privileges.
The fte-console function in the fte package before version 0.46b-4.1 does not drop root privileges, allowing local users to gain root access via the virtual console device.
Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe.
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems due to a malformed header type.
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing. This DLL logs user names and passwords in cleartext in the test.log file.
The BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS