CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created.
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
CVE-1999-0479 affects the Netscape Enterprise Server with VirtualVault running on HP-UX VVOS systems, which may lead to a denial of service attack.
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allow remote attackers to perform a denial of service by forcing the supervisor module to reload.
A vulnerability in the Cisco IOS web server allows attackers to remotely reboot the router by sending a long URL.
The Microsoft SMTP service, when attempting to send a message to a server and receiving a 4xx error code, quickly and repeatedly tries to redeliver the message, leading to a denial of service.
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
Remote attackers can perform a denial of service on WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
The FTP service on HP-UX 11.00 allows local users to gain elevated privileges.
Linux kernel versions 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, leading to a denial of service.
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
CVE-1999-0221 vulnerability affects Ascend routers that can be subjected to a denial of service attack through port 150, used for remote administration.
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
Netmanager Chameleon SMTPd has several buffer overflow vulnerabilities that can cause system crashes.
SLMail versions 3.1 and 3.2 allow local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
Remote attackers can perform a denial of service on WinGate machines using a buffer overflow in the Winsock Redirector Service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS