CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The WINS server in Microsoft Windows NT 4.0 before SP4 is vulnerable to an attack that can lead to denial of service by sending invalid UDP frames to port 137. Attackers can exploit this vulnerability by flooding the server with random packets.
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
Eudora and Eudora Light before version 3.05 allow remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as dates before 1970 or dates that are 100 years after the current date.
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
Buffer overflow in the ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed 'EXPN *@' command.
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names.
The vulnerability in Solaris SUNWadmap allows for root access.
Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port.
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users.
StarTech's POP3 proxy server and telnet server allow remote attackers to cause a denial of service via a long USER command.
CVE-1999-0494 is a denial of service vulnerability in the WinGate proxy due to a buffer overflow in the POP3 protocol.
CVE-1999-0007 vulnerability allows information to be extracted from SSL-encrypted sessions using PKCS #1. This could lead to the disclosure of sensitive data transmitted in these sessions.
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.
SSH versions 1.2.25, 1.2.23, and others, when used in CBC or CFB modes, allow remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet.
Sun's ftpd daemon can be subjected to a denial of service.
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
The Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, allowing remote attackers to cause a denial of service.
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass desktop protection. This can be achieved by using <CTRL><ALT><DEL> to kill processes in the task manager, booting the system from a separate disk, or interrupting certain processes during system boot.
A Unix account has a guessable password.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS