CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in dbadmin CGI program version 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
The TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means.
IBM/Tivoli OPC Tracker Agent version 2 release 1 is vulnerable to a denial of service attack that can be triggered by malformed data sent to the localtracker client port (5011). This attack prevents the connection from being closed properly.
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions that are world-readable and world-writable. This could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
A malicious Palace server can force a client to execute arbitrary programs.
A Windows NT domain user or administrator account has a guessable password.
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root or modify system parameters.
The Windows NT guest account is enabled, which may lead to unauthorized access to the system.
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, known as untrusted scripted paste.
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop.
Various modems that do not implement a guard time or are configured with a guard time of 0 can allow remote attackers to execute arbitrary modem commands via a '+++' sequence in ICMP packets, the subject of an e-mail message, IRC commands, and others.
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
The SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character.
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, allowing remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Buffer overflow in Sun's ping program can give local users root access.
iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS