CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0880 affects WU-FTPD, where the SITE NEWER command improperly manages memory, leading to a denial of service.
Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
ARCAD Systemhaus version 0.078-5 installs critical programs and files with world-writable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.
The mknod command in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
Arkiea nlservd allows remote attackers to conduct a denial of service.
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) version 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
KVIrc IRC client 0.9.0 has a directory traversal vulnerability when the 'Listen to !nick <soundname> requests' option is enabled. This allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
CVE-1999-0908 affects the Solaris TCP streams service, which can be exploited by a malicious connection, causing the server to panic due to recursive calls to mutex_enter.
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
Buffer overflow in the Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch may lead to unauthorized access.
Kodak/Wang ActiveX controls for Internet Explorer 4.01 and 5.0 are marked as 'Safe for Scripting', allowing remote attackers to create and modify files and execute arbitrary commands.
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could lead to it being cached by a proxy and inadvertently used by a different user.
The vulnerability in download.cgi version 1.0 allows remote attackers to read arbitrary files by exploiting the .. (dot dot) sequence in the f parameter.
Nosque MsgCore 2.14 stores passwords in cleartext, potentially allowing local users to gain privileges. The administrator password is stored in the AdmPasswd registry key, and user passwords in the Userbase.dbf data file.
gFTP FTP client version 1.13 and earlier versions before 2.0.0 records a password in plaintext in (1) the log window, or (2) in a log file.
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
Buffer overflow in Netscape Communicator occurs via EMBED tags in the pluginspage option.
The Compaq Integration Maintenance Utility in versions prior to SmartStart 4.50 modifies the legal notice caption and text in Windows NT, which could lead to a violation of security policy.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS