CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in CommuniGatePro caused by a long string sent to the HTTP configuration port.
ORBit and gnome-session in Red Hat Linux 6.1 allow remote attackers to crash a program.
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious WPAD server.
CVE-1999-0846 affects MDaemon 2.7 and involves a denial of service attack that can be executed through a large number of connection attempts.
ZBServer Pro allows remote attackers to read source code for executable files by inserting a dot (.) into the URL.
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Buffer overflow in FreeBSD angband allows local users to gain privileges.
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
A vulnerability in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
A vulnerability in FreeBSD seyon allows users to gain elevated privileges via a modified PATH variable used for locating the xterm and seyon-emu commands.
Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off. This may allow that user to modify the location of folders accessed by later users.
Buffer overflow in the free internet chess server (FICS) program, xboard, may lead to unauthorized access or system crashes.
The web interface server of Symantec Mail-Gear 1.0 allows remote users to read arbitrary files via a .. (dot dot) attack.
Cabletron SmartSwitch Router (SSR) 8000 with firmware 2.x can only handle 200 ARP requests per second, allowing a denial of service attack to succeed by flooding the router with ARP requests exceeding that limit.
CVE-1999-0844 vulnerability affects MDaemon WorldClient and WebConfig services, which are susceptible to denial of service (DoS) attacks via a long URL.
CVE-1999-0831 vulnerability affects the syslogd service in Linux, which is susceptible to a denial of service (DoS) attack through a large number of connections.
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, allowing local users to obtain passwords and gain privileges by reading wtmp, e.g., via the last command.
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS