CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The mylog script in CGI PHP allows an attacker to read any file on the target server.
Buffer overflow in the telnet daemon in the tgetent function allows remote attackers to gain root access via the TERMCAP environmental variable.
The CGI PHP mlog script allows an attacker to read any file on the target server.
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, leading to a core dump that may contain sensitive password information.
A vulnerability in the sort tool allows local users to modify arbitrary files writable by the user running sort by creating temporary files and following symbolic links.
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be set without a password, allowing remote attackers to connect to the printer and change its IP address or disable logging.
A vulnerability in the BSD line printer daemon (lpd) allows for file creation and deletion, as well as remote code execution.
Vulnerability in the HP-UX mediainit program may lead to unauthorized access to the system.
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
All records in a WINS database can be deleted through SNMP, leading to denial of service.
Some classic Cisco IOS devices have a vulnerability in PPP CHAP authentication, allowing unauthorized PPP connections to be established.
Buffer overflow in AIX rcp command allows local users to obtain root access.
The sysdef command in Solaris allows local users to read kernel memory, potentially leading to root privileges.
CVE-1999-0272 vulnerability involves a denial of service attack in Slmail version 2.5 through the POP3 port.
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS