CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
CVE-1999-0418 vulnerability concerns a denial of service attack in SMTP applications like Sendmail. A remote attacker, such as a spammer, can exploit multiple 'RCPT TO' commands in the same connection session.
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created.
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
A vulnerability in the Cisco IOS web server allows attackers to remotely reboot the router by sending a long URL.
Linux kernel versions 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, leading to a denial of service.
CVE-1999-0221 vulnerability affects Ascend routers that can be subjected to a denial of service attack through port 150, used for remote administration.
The FTP service on HP-UX 11.00 allows local users to gain elevated privileges.
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
Remote attackers can perform a denial of service on WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
The Microsoft SMTP service, when attempting to send a message to a server and receiving a 4xx error code, quickly and repeatedly tries to redeliver the message, leading to a denial of service.
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allow remote attackers to perform a denial of service by forcing the supervisor module to reload.
Netmanager Chameleon SMTPd has several buffer overflow vulnerabilities that can cause system crashes.
CVE-1999-0479 affects the Netscape Enterprise Server with VirtualVault running on HP-UX VVOS systems, which may lead to a denial of service attack.
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
SLMail versions 3.1 and 3.2 allow local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
Remote attackers can perform a denial of service on WinGate machines using a buffer overflow in the Winsock Redirector Service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS