CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
The klock program in KDE allows local users to unlock a session using malformed input.
The mailman package in Debian uses weak authentication, allowing attackers to gain privileges.
Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
The useradd command in Solaris 7.0 does not properly interpret certain date formats specified in the '-e' (expiration date) argument, which could allow users to log in after their accounts have expired.
ssh version 2.0.12, and possibly other versions, allows valid usernames to attempt to enter the correct password multiple times, but only prompts for a password once for an invalid username. This allows remote attackers to determine user account names on the server.
The visadmin.exe program in OmniHTTPD allows a remote attacker to conduct a denial of service attack via a malformed URL, resulting in the creation of a large number of temporary files.
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, allowing local users to write to other tty devices.
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
CVE-1999-0772 is a denial of service vulnerability in Compaq Management Agents and the Compaq Survey Utility that can be triggered by sending a long string to port 2301.
CVE-1999-0804 vulnerability affects Linux 2.2.x kernels, where malformed ICMP packets with unusual types, codes, and IP header lengths can lead to denial of service.
The screen and rxvt programs in Red Hat Linux 6.0 do not properly set the modes of tty devices, allowing local users to write to other ttys.
In IRIX 6.5 through 6.5.2, nsd exports a virtual filesystem on a UDP port, allowing remote attackers to view files and potentially cause a denial of service by mounting the nsd virtual file system.
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631.
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the 'Save password' option.
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS