CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges.
The Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, allowing local users to easily decrypt the passwords and gain privileges.
Buffer overflow in Tetrix TetriNet daemon version 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname.
O'Reilly WebSite 1.1e and Website Pro 2.0 allow remote attackers to execute arbitrary commands via shell metacharacters in an argument to args.cmd or args.bat.
Multilink PPP for ISDN dialup users in Ascend before version 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier.
FileSystemObject (FSO) in the showfile.asp script allows remote attackers to read arbitrary files by specifying their names in the file parameter.
In Sun Solaris and SunOS, vulnerabilities in the man and catman programs allow overwriting arbitrary files.
A race condition in the db_loader program in ClearCase allows local users to gain root access by setting SUID bits.
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
Nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the 'flags' registry key to 1920.
WS_FTP server is vulnerable to a remote denial of service (DoS) attack through the cwd command.
Local users can perform a denial of service attack on Alpha Linux by using MILO to force a reboot.
A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
CVE-1999-0351 vulnerability affects FTP services, allowing attackers to perform denial of service attacks and unauthorized data access. Attackers can steal data by connecting to a port intended for client use.
The netstation.navio-com.rte configuration script version 1.1.0.1 for Navio NC on IBM AIX exports the /tmp directory over NFS as world-readable and world-writable.
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVE-1999-0400 affects Linux version 2.2.0, where executing the ldd command on a core file can lead to a denial of service attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS