CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The rsh/rlogin service is running, which may lead to unauthorized access to the system.
The discard service is running, which may lead to unauthorized access or resource exploitation.
The NT Alerter and Messenger services are running, which may lead to unauthorized access to information.
A critical Windows NT registry key has an inappropriate value.
A network intrusion detection system (IDS) does not properly reassemble fragmented packets, which may lead to incomplete traffic analysis.
A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
A system-critical Windows NT registry key has inappropriate permissions, which may lead to unauthorized access or modification.
An event log in Windows NT has inappropriate access permissions.
A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
A filter in a router or firewall allows unusual fragmented packets.
The MetaWeb web server from MetaInfo allows users to upload, execute, and read scripts, which can lead to unauthorized access to the system.
The NetWare version of LaserFiche stores usernames and passwords unencrypted and allows administrative changes without logging.
The system is running a version of software that has been replaced with a Trojan Horse at one of its distribution points. This affects TCP Wrappers 7.6, util-linux 2.9g, wuarchive ftpd (wuftpd) 2.2 and 2.1f, IRC client (ircII) ircII 2.2.9, OpenSSH 3.4p1, and Sendmail 8.12.6.
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
The Gopher service is running, which may lead to unauthorized access to data.
The rexec service is running, which may lead to unauthorized access to the system.
In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets, which may lead to unauthorized access or bypassing of security measures.
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
A Windows NT log file has an inappropriate maximum size or retention period.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS