CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The 3Com HiPer Access Router Card (HiperARC) versions 4.0 through 4.2.29 is vulnerable to a denial of service attack that can cause the device to reboot. Attackers can exploit this by flooding the telnet port with IAC packets.
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
CVE-1999-0694 vulnerability concerns the ptrace system call in AIX, allowing local users to crash the system.
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
A race condition in the SSL ISAPI filter in IIS and other servers may lead to information leakage in plaintext.
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
Vulnerability in IIS 4.0 allows a denial of service attack by flooding the server with HTTP requests containing malformed headers.
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
Check Point FireWall-1 is vulnerable to a denial of service attack that can be executed via UDP packets sent through VPN-1 to port 0 of a host.
The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
The Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, potentially leading to a denial of service.
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
Buffer overflow in ALMail32 POP3 client occurs via From: or To: headers. This may lead to unauthorized access or application crashes.
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
FlowPoint DSL router firmware versions prior to 3.0.8 allow a remote attacker to exploit a password recovery feature from the network, enabling brute force password guessing.
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
The dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
Buffer overflow in ToxSoft NextFTP client occurs when executing the CWD command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS