CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0908 affects the Solaris TCP streams service, which can be exploited by a malicious connection, causing the server to panic due to recursive calls to mutex_enter.
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Buffer overflow in the Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch may lead to unauthorized access.
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
Kodak/Wang ActiveX controls for Internet Explorer 4.01 and 5.0 are marked as 'Safe for Scripting', allowing remote attackers to create and modify files and execute arbitrary commands.
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could lead to it being cached by a proxy and inadvertently used by a different user.
The vulnerability in download.cgi version 1.0 allows remote attackers to read arbitrary files by exploiting the .. (dot dot) sequence in the f parameter.
Nosque MsgCore 2.14 stores passwords in cleartext, potentially allowing local users to gain privileges. The administrator password is stored in the AdmPasswd registry key, and user passwords in the Userbase.dbf data file.
gFTP FTP client version 1.13 and earlier versions before 2.0.0 records a password in plaintext in (1) the log window, or (2) in a log file.
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
The Compaq Integration Maintenance Utility in versions prior to SmartStart 4.50 modifies the legal notice caption and text in Windows NT, which could lead to a violation of security policy.
Buffer overflow in Netscape Communicator occurs via EMBED tags in the pluginspage option.
The 'download behavior' in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
The Eyedog ActiveX control is marked as 'safe for scripting' for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.
The email client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files home.fc, network.fc, or FCCLIENT.LOG.
Microsoft HTML control used in Internet Explorer 5.0, FrontPage Express, Outlook Express 5, and Eudora allows remote malicious websites or HTML emails to cause a denial of service through large HTML form fields, leading to 100% CPU consumption.
CVE-1999-0939 affects the IRC Epic/epic4 client in Debian, which is vulnerable to a denial of service (DoS) attack via a long string.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS