CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.03)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-1999-0949
High

Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.

CVE-1999-0946
MediumEPSS 75%

Buffer overflow in Yamaha MidiPlug occurs via a Text variable in an EMBED tag.

CVE-1999-0948
High

Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

CVE-1999-0827
LowEPSS 91%

By default, Internet Explorer 5.0 and other versions enable the 'Navigate sub-frames across different domains' option, which allows frame spoofing.

CVE-1999-0854
MediumEPSS 67%

Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.

CVE-1999-1077
Medium

The idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.

CVE-1999-0354
HighEPSS 91%

Internet Explorer 4.x and 5.x in conjunction with Word 97 allows arbitrary execution of Visual Basic programs on the IE client through the Word 97 template, which does not warn the user that it contains executable content. This vulnerability also applies to Outlook when the client views a malicious email message.

CVE-1999-1517
High

A vulnerability in the Amanda backup system used in various UNIX operating systems allows runtar to execute tar with root privileges. A user can overwrite or read arbitrary files by providing target files to runtar.

CVE-1999-0830
HighEPSS 61%

Buffer overflow in the Xsco command of SCO UnixWare caused by a long argument.

CVE-1999-0829
MediumEPSS 71%

HP Secure Web Console uses weak encryption, which may expose data to unauthorized access.

CVE-1999-1577
MediumEPSS 97%

Buffer overflow in HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.

CVE-1999-0873
HighEPSS 91%

Buffer overflow in Skyfull mail server occurs when processing the MAIL FROM command.

CVE-1999-1532
MediumEPSS 82%

Netscape Messaging Server versions 3.54, 3.55, and 3.6 allow a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.

CVE-1999-0882
MediumEPSS 77%

The Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

CVE-1999-0915
MediumEPSS 84%

URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVE-1999-0950
HighEPSS 94%

Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.

CVE-1999-1226
LowEPSS 53%

Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.

CVE-1999-1076
Medium

The idle locking function in MacOS 9 allows local users to bypass password protection of locked sessions. A user can select the 'Log Out' option and then 'Cancel' in the dialog box, which returns them to the locked session.

CVE-1999-0903
HighEPSS 71%

The AIX Packet Filtering Module (genfilt) does not properly filter traffic to destination ports greater than 32767, which may lead to unauthorized access.

CVE-1999-1234
MediumEPSS 96%

LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in calls to SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS