CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A Unix account has a guessable password.
An account on a router, firewall, or other network device has a default, null, blank, or missing password.
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) are vulnerable to denial of service attacks. Remote attackers can send a flood of malformed packets, causing the server to slow down and fill the event logs with error messages.
Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.
Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106.
Stalker Internet Mail Server version 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Denial of Service vulnerability in BIND 8 Releases that can be exploited via maliciously formatted DNS messages.
Network Flight Recorder (NFR) versions 1.5 and 1.6 are vulnerable to a denial of service attack that can crash the nfrd service. Attackers can achieve this by sending a TCP packet with a null header and data field.
Buffer overflow in AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 that can be exploited via CNAME record and zone transfer.
The ipxchk and ipxlink programs in SGI OS2 IRIX 6.3 do not properly clear the IFS environmental variable before executing system calls, allowing local users to execute arbitrary commands.
A directory traversal vulnerability in the pfdispaly.cgi program (also referred to as 'pfdisplay') for SGI's Performer API Search Tool allows remote attackers to read arbitrary files.
HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
CVE-1999-0257 vulnerability concerns a teardrop attack variant that exploits IP fragmentation to cause a denial of service (DoS). This attack involves sending specially crafted packets that can lead to system crashes.
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver, but inadvertently listens on port N-1, allowing remote attackers to cause a denial of service via a large number of connections to port N-1.
Attackers can cause a denial of service in Ascend MAX and Pipeline routers by sending a malformed packet to the discard port, which is used by the Java Configurator tool.
UDP messages to broadcast addresses are allowed, enabling a Fraggle attack that can cause a denial of service by flooding the target.
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS