CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Microsoft Outlook Express before version 4.72.3612.1700 allows a malicious user to send a message containing '..', which can inadvertently cause Outlook to re-enter POP3 command mode and hang the POP3 session.
The inndstart program in INN allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
The inndstart program in INN allows local users to gain root privileges via the 'pathrun' parameter in the inn.conf file.
Buffer overflow in the dtprintinfo program of Solaris may lead to unauthorized access to the system.
Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.
CVE-1999-0686 affects the Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS), which is vulnerable to a denial of service (DoS) attack via a long URL.
The viewcode.asp file in IIS and Site Server allows remote attackers to read arbitrary files.
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
The showcode.asp file in IIS and Site Server allows remote attackers to read arbitrary files.
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls. This could allow users on the same system to access restricted web sites that were visited by other users.
Internet Explorer with a security setting below Medium allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.
NAI VirusScan NT 4.0.2 improperly modifies the scan.dat virus definition file during an FTP update, while reporting that the update was successful. This could mislead system administrators into believing that the definitions have been updated correctly.
The SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.
Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
ICQ99 web server build 1701 with 'Active Homepage' enabled allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ('404 Forbidden') versus when a file does not exist ('404 not found').
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, allowing remote attackers to read arbitrary files from the client by specifying the full pathname for the file.
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS