CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Routed allows attackers to append data to files.
CVE-1999-0053 is a denial of service (DoS) vulnerability in FreeBSD that exploits TCP RST packets. An attacker can remotely initiate a connection reset, leading to service disruption.
The TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means.
IBM/Tivoli OPC Tracker Agent version 2 release 1 is vulnerable to a denial of service attack that can be triggered by malformed data sent to the localtracker client port (5011). This attack prevents the connection from being closed properly.
A malicious Palace server can force a client to execute arbitrary programs.
The Windows NT guest account is enabled, which may lead to unauthorized access to the system.
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop.
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
The SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character.
iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
A vulnerability in wwwboard allows a remote attacker to delete message board articles via a malformed argument.
CVE-1999-0779 vulnerability affects the recserv program in HP-UX SharedX, which is susceptible to a denial of service attack.
ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.
The 'established' keyword in some Cisco IOS software allowed an attacker to bypass filtering.
The Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.
The AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length.
IP fragmentation attack on Cisco PIX firewall and CBAC results in denial of service.
Opera 3.2.1 allows remote attackers to cause an application crash via a URL that contains an extra / in the http:// tag.
Netscape Enterprise servers may expose files through the PageServices query.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS