CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Gopher service is running, which may lead to unauthorized access to data.
The rexec service is running, which may lead to unauthorized access to the system.
In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets, which may lead to unauthorized access or bypassing of security measures.
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
A superfluous NFS server is running, but it is not importing or exporting any file systems.
The Windows NT system's registry audit policy does not log event successes or failures for non-critical registry keys.
The Logon box of a Windows NT system displays the name of the last user who logged in.
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
An attacker can force a printer to print arbitrary documents if it does not require a password, or to become disabled.
The #exec function is enabled for Server Side Include (SSI) files in IIS, which may lead to unauthorized command execution on the server.
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, such as 10.x.x.x, 127.x.x.x, 217.x.x.x.
The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
An application-critical Windows NT registry key has an inappropriate value.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS