CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0051 vulnerability allows arbitrary file creation and program execution using FLEXlm LicenseManager in versions 4.0 to 5.0 on IRIX.
The default password for the NETBIOS/SMB share is empty, null, or missing, creating a risk of unauthorized access.
A NETBIOS/SMB share password is guessable, which may lead to unauthorized access to network resources.
A local user or administrator account on Windows NT has a default, null, blank, or missing password.
A router or firewall allows source routed packets from arbitrary hosts.
The ScriptAlias directory in NCSA and Apache httpd allows attackers to read CGI programs.
The vulnerability in in.rshd allows users to log in with a NULL username and execute commands.
AIX innd version 1.5.1 allows remote access using control messages.
The user audit policy in Windows NT does not log event successes or failures, such as Logon and Logoff, File and Object Access, User and Group Management, Security Policy Changes, and System and Process Tracking.
The Windows NT password policy has inappropriate security-critical settings, such as password length, password age, or uniqueness.
A local user or administrator account in Windows NT has a guessable password.
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a dot in the URL.
Routing tables of the router can be obtained from arbitrary hosts.
The RSHSVC program in Windows NT allows remote users to execute arbitrary commands.
A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions.
Sendmail version 8.6.9 allows remote attackers to execute root commands using ident.
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
The file audit policy of a Windows NT system does not log event success or failure for security-critical files or directories.
The registry in Windows NT can be accessed remotely by users who are not administrators.
The NIS domain name is easily guessable, which may lead to unauthorized access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS