CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A Windows NT log file has an inappropriate maximum size or retention period.
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
The mail server is configured to allow SMTP mail relay, which can be exploited by spammers.
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets, which may lead to unauthorized access or bypassing of security measures.
An SSH server allows authentication through the .rhosts file, which may lead to unauthorized access.
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writable by world, a real password file is obtainable, or executable commands such as 'ls' can be overwritten.
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
Win32 ICQ 98a 1.30 and possibly other versions do not display the entire portion of long filenames. This could allow attackers to send executable files with long names that contain so many spaces that the .exe extension is not displayed, potentially misleading users about the safety of the file.
The netstat service is running, which allows remote attackers to obtain sensitive information.
In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
The rexec service is running, which may lead to unauthorized access to the system.
ICMP echo (ping) is allowed from arbitrary hosts, which may lead to unauthorized network scanning.
The UUCP service is running, which may lead to unauthorized access to the system.
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
Two or more Unix accounts have the same user identifier (UID), which can lead to authorization and resource access issues.
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS