CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.
CVE-1999-0228 vulnerability affects the RPCSS.EXE (RPC Locator) program in Windows NT, which is susceptible to a denial of service attack.
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
wu-ftp allows files to be overwritten via the rnfr command.
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
Movemail in HP-UX 10.20 has insecure permissions, allowing local users to gain privileges.
The netprint program in SGI IRIX 6.4 and earlier versions trusts the PATH environmental variable for finding and executing the disable program, allowing local users to gain privileges.
CVE-1999-0274 affects DNS servers in Windows NT that may be vulnerable to a denial of service attack. An attacker can send a malicious packet containing a response to a query that was not made, leading to server disruption.
A Windows NT user has inappropriate rights or privileges, which may include acting as System, adding workstations, or changing system time.
NFS allows users to use a 'cd ..' command, enabling access to directories outside the exported file system.
The 'quote cwd' command on FTP servers can reveal the full path of the home directory of the 'ftp' user.
Windows NT crashes or locks up when a Samba client executes a 'cd ..' command on a file share.
CVE-1999-0251 vulnerability affects the talk program, allowing remote attackers to disrupt a user's display, leading to denial of service.
A Windows NT account policy has inappropriate security-critical settings for lockout, such as lockout duration and the number of bad logon attempts, which may lead to unauthorized access.
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
The Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
ICMP redirect messages may crash or lock up a host.
The FormMail CGI program can be used by web servers other than the host server that it resides on.
A default SNMP community name (e.g. public), null, or missing can lead to unauthorized access to network devices.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS