CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: 03/11/2026(UTC) (v2026.11.03)

All Critical High Medium Low Actively exploited41,581 results

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

04/01/2000(UTC)

KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.

04/01/2000(UTC)

The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.

04/01/2000(UTC)

Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.

02/01/2000(UTC)

The WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.

31/12/1999(UTC)

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.

31/12/1999(UTC)

IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, known as the IIS 'GET' vulnerability.

31/12/1999(UTC)

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, allowing local users to gain privileges by decrypting the passwords.

31/12/1999(UTC)

The snprintf function in the db library version 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.

31/12/1999(UTC)

Vulnerability in the bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.

31/12/1999(UTC)

The genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, resulting in transactions being sent in cleartext.

31/12/1999(UTC)

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker.

31/12/1999(UTC)

CascadeView TFTP server allows local users to gain privileges via a symlink attack.

31/12/1999(UTC)

Squid version 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.

31/12/1999(UTC)

A vulnerability in Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.

31/12/1999(UTC)

The sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.

31/12/1999(UTC)

A vulnerability in Internet Explorer 3.02 and 4.0 that causes automatic resending of authentication information to the second site during a redirect.

31/12/1999(UTC)

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.

31/12/1999(UTC)

In Windows NT and Windows 2000, when an administrator changes a user policy, the policy is not properly updated if the local ntconfig.pol file is not writable by the user. This could allow local users to bypass restrictions that would otherwise be enforced by the policy.

31/12/1999(UTC)

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a dot to the end of the URL.

31/12/1999(UTC)

Microsoft Exchange Server 5.5 and 5.0 does not properly handle malformed NNTP and SMTP data, which can lead to application errors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS