CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
Tin version 1.40 creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file.
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long user name or password.
The default configuration in the Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, only restricting access to the /etc/ directory. This enables remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.
The Windows Media Player ActiveX object used in Internet Explorer 5.0 returns a specific error code when a file does not exist, allowing remote malicious websites to determine the existence of files on the client.
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, known as the 'Active Setup Control' vulnerability.
CVE-1999-0849 affects the BIND service, which can be vulnerable to a denial of service (DoS) attack via the maxdname parameter. An attacker can cause the DNS server to stop responding to queries.
A vulnerability in BIND named allows a denial of service attack by consuming more than 'fdmax' file descriptors.
FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
The bigconf.conf file in F5 BIG/ip version 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the 'file' parameter.
Buffer overflow in FreeBSD seyon can occur via the HOME environmental variable, -emulator argument, -modems argument, or the GUI.
Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.
FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
CVE-1999-0843 vulnerability involves a Denial of Service (DoS) attack on Cisco routers running NAT, triggered by a PORT command from an FTP client directed at the Telnet port.
Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.
Buffer overflow in Yamaha MidiPlug occurs via a Text variable in an EMBED tag.
HP Secure Web Console uses weak encryption, which may expose data to unauthorized access.
The idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS