CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
A vulnerability in FreeBSD seyon allows users to gain elevated privileges via a modified PATH variable used for locating the xterm and seyon-emu commands.
Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off. This may allow that user to modify the location of folders accessed by later users.
The web interface server of Symantec Mail-Gear 1.0 allows remote users to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in the free internet chess server (FICS) program, xboard, may lead to unauthorized access or system crashes.
CVE-1999-0844 vulnerability affects MDaemon WorldClient and WebConfig services, which are susceptible to denial of service (DoS) attacks via a long URL.
Cabletron SmartSwitch Router (SSR) 8000 with firmware 2.x can only handle 200 ARP requests per second, allowing a denial of service attack to succeed by flooding the router with ARP requests exceeding that limit.
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
CVE-1999-0831 vulnerability affects the syslogd service in Linux, which is susceptible to a denial of service (DoS) attack through a large number of connections.
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, allowing local users to obtain passwords and gain privileges by reading wtmp, e.g., via the last command.
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long user name or password.
Tin version 1.40 creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file.
Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
The default configuration in the Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, only restricting access to the /etc/ directory. This enables remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.
The Windows Media Player ActiveX object used in Internet Explorer 5.0 returns a specific error code when a file does not exist, allowing remote malicious websites to determine the existence of files on the client.
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, known as the 'Active Setup Control' vulnerability.
A vulnerability in BIND named allows a denial of service attack by consuming more than 'fdmax' file descriptors.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS