CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to read arbitrary files via a modified '......' attack.
Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.
Xsession in Red Hat Linux 6.1 and earlier allows local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome, or another level from kdm.
The NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) by sending certain packets, possibly with the Urgent (URG) flag set, to port 111.
The Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp directory as a shared directory with insecure permissions, allowing local users to send arbitrary files to the remote server and view files being transferred.
Macromedia 'The Matrix' screen saver on Windows 95 with the 'Password protected' option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC key.
The TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.
Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
Internet Anywhere Mail Server version 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from this file.
The Internet Anywhere POP3 Mail Server version 2.3.1 is vulnerable to a denial of service attack that can cause the server to crash. Attackers can exploit LIST, TOP, or UIDL commands using letters as arguments to trigger this issue.
CVE-1999-0880 affects WU-FTPD, where the SITE NEWER command improperly manages memory, leading to a denial of service.
Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
ARCAD Systemhaus version 0.078-5 installs critical programs and files with world-writable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.
The mknod command in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
Arkiea nlservd allows remote attackers to conduct a denial of service.
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) version 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
KVIrc IRC client 0.9.0 has a directory traversal vulnerability when the 'Listen to !nick <soundname> requests' option is enabled. This allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS