CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The system is operating in 'promiscuous' mode, allowing for packet sniffing.
A service or application has a backdoor password that was placed there by the developer.
A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.
A system-critical NETBIOS/SMB share has inappropriate access control.
IIS 4.0 and Apache log HTTP request methods, regardless of their length, allowing a remote attacker to hide the actual URL they are requesting.
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
Anonymous FTP is enabled, allowing users to access files without authentication.
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location.
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
Buffer overflow in ircd allows arbitrary command execution.
Attackers can crash the IRC server, leading to a denial of service.
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
The cfingerd service in Linux could be exploited to gain root access.
CVE-1999-0205 vulnerability affects Sendmail versions 8.6.11 and 8.6.12, where a flaw leads to a denial of service attack.
The system is running a version of software that has been replaced with a Trojan Horse at one of its distribution points. This affects TCP Wrappers 7.6, util-linux 2.9g, wuarchive ftpd (wuftpd) 2.2 and 2.1f, IRC client (ircII) ircII 2.2.9, OpenSSH 3.4p1, and Sendmail 8.12.6.
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS