CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users.
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
Ray Chan WWW Authorization Gateway version 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the 'user' parameter.
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via 'long input strings.'
StarTech's POP3 proxy server and telnet server allow remote attackers to cause a denial of service via a long USER command.
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
CVE-1999-0494 is a denial of service vulnerability in the WinGate proxy due to a buffer overflow in the POP3 protocol.
A vulnerability in SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Linux version 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, allowing local users to cause a denial of service by sending SIGIO to processes that do not catch it.
Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, allowing remote attackers to conduct spoofing and hijack TCP sessions.
The NIS finger vulnerability allows an attacker to conduct a denial of service by sending a large number of finger requests, resulting in a large number of NIS queries.
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry. This could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in res_diff, ca.src, and mail.chk.
Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable.
CVE-1999-0007 vulnerability allows information to be extracted from SSL-encrypted sessions using PKCS #1. This could lead to the disclosure of sensitive data transmitted in these sessions.
SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
Textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS