CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Webgais program allows a remote user to execute arbitrary commands.
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
Websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver).
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x allows remote attackers to monitor a user's web activities, known as the Bell Labs vulnerability.
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
A password for accessing a WWW URL is guessable.
A DNS server allows zone transfers.
CVE-1999-0250 vulnerability involves a denial of service attack on the Qmail server that can be triggered by long SMTP commands.
The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
NFS allows attackers to read and write any file on the system by specifying a false UID.
TCP ports are sequentially allocated, allowing for spoofing attacks.
CVE-1999-0195 vulnerability affects the RPC portmapper service, allowing attackers to register or unregister RPC services and spoof RPC services using a spoofed source IP address like 127.0.0.1.
CVE-1999-0184 affects the bind DNS server, which, when compiled with the -DALLOW_UPDATES option, allows dynamic updates. This creates a potential for malicious modification of DNS records.
The rwho/rwhod service is running, which exposes machine status and user information.
Buffer overflow in wu-ftp from PASV command causes a core dump.
The wu-ftpd FTP daemon allows any user and password combination.
Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long CWD or LS command.
RIP v1 is susceptible to spoofing, which can lead to the falsification of routing information in the network.
The WinNuke vulnerability in Windows 95/NT allows for a DoS attack via the NETBIOS port, leading to remote system lockup.
The Perl fingerd program allows arbitrary command execution from remote users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS