CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A network intrusion detection system (IDS) does not properly reassemble fragmented packets, which may lead to incomplete traffic analysis.
The rpc.admind service in Solaris is not running in a secure mode, which may lead to unauthorized access.
Buffer overflow in ircd allows arbitrary command execution.
A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
The OS/2 or POSIX subsystem in NT is enabled, which may lead to unauthorized access or exploitation of the system.
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location.
There is a one-way or two-way trust relationship between Windows NT domains.
A system-critical Windows NT file or directory has inappropriate permissions, which may lead to unauthorized access or modification of data.
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
Windows NT is not using a password filter utility, such as PASSFILT.DLL, which may lead to weaker password protection for users.
The rsh/rlogin service is running, which may lead to unauthorized access to the system.
A vulnerability in Sendmail allows input to be piped to a program via an alias.
The discard service is running, which may lead to unauthorized access or resource exploitation.
A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
The MetaWeb web server from MetaInfo allows users to upload, execute, and read scripts, which can lead to unauthorized access to the system.
The NT Alerter and Messenger services are running, which may lead to unauthorized access to information.
The NetWare version of LaserFiche stores usernames and passwords unencrypted and allows administrative changes without logging.
The system is running a version of software that has been replaced with a Trojan Horse at one of its distribution points. This affects TCP Wrappers 7.6, util-linux 2.9g, wuarchive ftpd (wuftpd) 2.2 and 2.1f, IRC client (ircII) ircII 2.2.9, OpenSSH 3.4p1, and Sendmail 8.12.6.
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS