CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
64-bit Solaris 7 procfs allows local users to perform a denial of service.
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) by connecting to port 99 and disconnecting without sending any data.
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
CVE-1999-0418 vulnerability concerns a denial of service attack in SMTP applications like Sendmail. A remote attacker, such as a spammer, can exploit multiple 'RCPT TO' commands in the same connection session.
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created.
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
IMail POP3 daemon uses weak encryption, allowing local users to read files.
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
A vulnerability in the Cisco IOS web server allows attackers to remotely reboot the router by sending a long URL.
The Microsoft SMTP service, when attempting to send a message to a server and receiving a 4xx error code, quickly and repeatedly tries to redeliver the message, leading to a denial of service.
Remote attackers can perform a denial of service on WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
The FTP service on HP-UX 11.00 allows local users to gain elevated privileges.
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
CVE-1999-0221 vulnerability affects Ascend routers that can be subjected to a denial of service attack through port 150, used for remote administration.
Netmanager Chameleon SMTPd has several buffer overflow vulnerabilities that can cause system crashes.
Linux kernel versions 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, leading to a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS