CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in the OpenBSD ping tool may lead to unauthorized access or system crashes.
Buffer overflow in the Linux autofs module due to long directory names allows local users to perform a denial of service attack.
Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
The xtvscreen program in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
The cfengine package in Debian GNU/Linux is susceptible to a symlink attack.
Vulnerability in the edauth command of Compaq Tru64 UNIX may allow unauthorized users to gain access to the system.
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted after installation.
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
The netstat command in NetBSD allows local users to access kernel memory.
Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.
CVE-1999-0451 vulnerability in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
When upgrading from IIS 2 or 3 to IIS 4, the ism.dll file is left in the /scripts/iisadmin directory, which does not restrict access to the local machine. This allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
Solaris ff.core allows local users to modify files.
L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
The PIM software for Royal daVinci does not properly password-protect access to data stored in the .mdb (Microsoft Access) file, allowing local users to read the data without a password by directly accessing the files with another application, such as Access.
WinGate is being used, which may lead to potential security threats.
The chargen service is running, which may lead to unauthorized use of system resources.