CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow local users to read the information from another user's index.dat or people physically observing another user to read the information from the status bar when the user hovers the mouse over a link.
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), allowing remote attackers to perform spoofing and session hijacking.
Microsoft FrontPage stores form results in a default location at /_private/form_results.txt, which is world-readable and accessible in the document root. This allows remote attackers to read possibly sensitive information submitted by other users.
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
The scriptlet.typelib ActiveX control is marked as 'safe for scripting' for Internet Explorer, allowing a remote attacker to execute arbitrary commands, as demonstrated by the Bubbleboy attack.
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
Remote attackers can cause a denial of service on Linux through a malformed TERM environmental variable in the telnetd daemon.
A vulnerability in dbsnmp in Oracle Intelligent Agent allows local users to gain elevated privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to locate the nmiconf.tcl script.
The default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
The 3Com HiPer Access Router Card (HiperARC) versions 4.0 through 4.2.29 is vulnerable to a denial of service attack that can cause the device to reboot. Attackers can exploit this by flooding the telnet port with IAC packets.
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
Vulnerability in IIS 4.0 allows a denial of service attack by flooding the server with HTTP requests containing malformed headers.
The Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, potentially leading to a denial of service.
Check Point FireWall-1 is vulnerable to a denial of service attack that can be executed via UDP packets sent through VPN-1 to port 0 of a host.
The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Buffer overflow in ALMail32 POP3 client occurs via From: or To: headers. This may lead to unauthorized access or application crashes.
FlowPoint DSL router firmware versions prior to 3.0.8 allow a remote attacker to exploit a password recovery feature from the network, enabling brute force password guessing.
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS