CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created.
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allow remote attackers to perform a denial of service by forcing the supervisor module to reload.
Remote attackers can perform a denial of service on WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
The Microsoft SMTP service, when attempting to send a message to a server and receiving a 4xx error code, quickly and repeatedly tries to redeliver the message, leading to a denial of service.
CVE-1999-0479 affects the Netscape Enterprise Server with VirtualVault running on HP-UX VVOS systems, which may lead to a denial of service attack.
The FTP service on HP-UX 11.00 allows local users to gain elevated privileges.
Linux kernel versions 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, leading to a denial of service.
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
CVE-1999-0221 vulnerability affects Ascend routers that can be subjected to a denial of service attack through port 150, used for remote administration.
Netmanager Chameleon SMTPd has several buffer overflow vulnerabilities that can cause system crashes.
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
A vulnerability in the Cisco IOS web server allows attackers to remotely reboot the router by sending a long URL.
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
SLMail versions 3.1 and 3.2 allow local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
Remote attackers can perform a denial of service on WinGate machines using a buffer overflow in the Winsock Redirector Service.
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS