CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Error messages generated by gdm with the VerboseAuth setting allow an attacker to identify valid users on a system.
The default permissions for UnixWare in the /var/mail directory allow local users to read and modify other users' mail.
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
The default permissions for Endymion MailMan allow local users to read email or modify files.
Insecure directory permissions in RPM distribution for PostgreSQL allow local users to gain privileges by reading a plaintext password file.
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
Debian GNU/Linux 2.1 has an issue with restoring symlinks, allowing a local user to modify the ownership of arbitrary files.
The gdc program in FreeBSD allows local users to modify files via a symlink attack.
A vulnerability in Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
The gpm program in Linux allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.
CVE-1999-0851 vulnerability affects BIND service, which can be exploited for a denial of service (DoS) attack via NAPTR records.
The vulnerability in cgiwrap used in Cobalt RaQ 2.0 and RaQ 3i involves improper user identification when running certain scripts. This allows a malicious site administrator to access data from another virtual site on the same system.
Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.
By default, Internet Explorer 5.0 and other versions enable the 'Navigate sub-frames across different domains' option, which allows frame spoofing.
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.
Shell Lock in Cactus Software uses weak encryption, allowing attackers to easily decrypt and obtain the source code.
The vulnerability in FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS