CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
Win32 ICQ 98a 1.30 and possibly other versions do not display the entire portion of long filenames. This could allow attackers to send executable files with long names that contain so many spaces that the .exe extension is not displayed, potentially misleading users about the safety of the file.
The netstat service is running, which allows remote attackers to obtain sensitive information.
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
The RPC portmapper service is running, which may lead to unauthorized access to RPC services.
SSH version 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
mysqld in MySQL 3.21 creates log files with world-readable permissions, allowing local users to obtain passwords for users in the user database.
Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program.
The BackWeb client stores the username and password in cleartext in the Communication registry key, which could allow other local users to gain privileges by reading the password.
The RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, allowing local users to gain administrator privileges.
Linux PAM modules allow local users to gain root access using temporary files.
CVE-1999-0478 vulnerability affects the sendmail service in HP-UX version 8.8.6, which is susceptible to a denial of service attack related to accepting connections.
Remote attackers can perform a denial of service attack using fcagent in IRIX.
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions, including the setgid bit.
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange creates a log file, exchverify.log, which contains usernames and passwords in plaintext.
The CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, allowing others with physical access to log in with any string.
NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection.
Routed allows attackers to append data to files.
CVE-1999-0053 is a denial of service (DoS) vulnerability in FreeBSD that exploits TCP RST packets. An attacker can remotely initiate a connection reset, leading to service disruption.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS