CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVE-1999-0400 affects Linux version 2.2.0, where executing the ldd command on a core file can lead to a denial of service attack.
Windows 98 and other operating systems allow remote attackers to cause a denial of service via crafted 'oshare' packets, possibly involving invalid fragmentation offsets.
Buffer overflow in the FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.
The default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, allowing remote users to read documentation files for the entire server.
The Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendars of other users when the calendar is being shared.
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
There is a buffer overflow vulnerability in Thomas Boutell's cgic library, in versions up to 1.05.
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the 'flags' registry key to 1920.
Version 1.5.3 of wget follows symlinks, leading to permission changes on the target file instead of the symlink itself.
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
IIS 4.0 and Apache log HTTP request methods, regardless of their length, allowing a remote attacker to hide the actual URL they are requesting.
The netstat service is running, which allows remote attackers to obtain sensitive information.
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
Win32 ICQ 98a 1.30 and possibly other versions do not display the entire portion of long filenames. This could allow attackers to send executable files with long names that contain so many spaces that the .exe extension is not displayed, potentially misleading users about the safety of the file.
Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
The ugidd RPC interface allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS