CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
IIS 4.0 and Apache log HTTP request methods, regardless of their length, allowing a remote attacker to hide the actual URL they are requesting.
A system-critical NETBIOS/SMB share has inappropriate access control.
A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.
A service or application has a backdoor password that was placed there by the developer.
The system is operating in 'promiscuous' mode, allowing for packet sniffing.
NFS exports system-critical data to the world, which may include the root directory or a password file.
A Unix account with a name other than 'root' has UID 0, meaning it has root privileges.
Windows NT automatically logs in an administrator upon rebooting.
The rpc.admind service in Solaris is not running in a secure mode, which may lead to unauthorized access.
A system-critical Windows NT file or directory has inappropriate permissions, which may lead to unauthorized access or modification of data.
A vulnerability in Sendmail allows input to be piped to a program via an alias.
A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
CVE-1999-0569 vulnerability concerns WWW directories that allow auto-indexing. If a directory does not contain an index.html file, users can obtain a list of all files in that directory.
Windows NT is not using a password filter utility, such as PASSFILT.DLL, which may lead to weaker password protection for users.
There is a one-way or two-way trust relationship between Windows NT domains.
A network service is running on a nonstandard port, which may lead to difficulties in detection and monitoring.
The Windows NT system's registry audit policy does not log event successes or failures for security-critical registry keys.
The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
A Windows NT file system is not NTFS, which may lead to data integrity issues.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS