CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An application-critical Windows NT registry key has an inappropriate value.
CVE-1999-0698 affects the IP protocol logger (ippl) service on Red Hat and Debian Linux, which is vulnerable to denial of service attacks.
An application-critical Windows NT registry key has inappropriate permissions.
A component service related to NIS+ is running.
A trust relationship exists between two Unix hosts, which may lead to unauthorized access to resources.
Two or more Unix accounts have the same user identifier (UID), which can lead to authorization and resource access issues.
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
mSQL version 2.0.1 and below allows remote code execution through a buffer overflow.
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using tools such as nmap or queso.
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
Win32 ICQ 98a 1.30 and possibly other versions do not display the entire portion of long filenames. This could allow attackers to send executable files with long names that contain so many spaces that the .exe extension is not displayed, potentially misleading users about the safety of the file.
The mail server is configured to allow SMTP mail relay, which can be exploited by spammers.
The netstat service is running, which allows remote attackers to obtain sensitive information.
The Windows NT system's registry audit policy does not log event successes or failures for non-critical registry keys.
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
The RPC portmapper service is running, which may lead to unauthorized access to RPC services.
SSH version 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS