CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Linux implementations of TFTP would allow access to files outside the restricted directory.
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via vuefile, vuepad, dtfile, or dtpad, which do not authenticate users.
The vulnerability in rpc.mountd on Linux, Ultrix, and possibly other operating systems allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists.
Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.
CVE-1999-0024 vulnerability involves a malicious attack on DNS cache via BIND, exploiting predictable query IDs.
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs and hiding activities.
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, violating the Java security model.
CVE-1999-0524 vulnerability allows ICMP information such as netmask and timestamp to be received from arbitrary hosts.
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
Oracle Webserver 2.1 allows remote attackers to cause a denial of service via a long HTTP GET request when serving PL/SQL stored procedures.
CVE-1999-0026 allows root privileges to be gained via a buffer overflow in the pset command on SGI IRIX systems.
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
Websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver).
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
CVE-1999-0184 affects the bind DNS server, which, when compiled with the -DALLOW_UPDATES option, allows dynamic updates. This creates a potential for malicious modification of DNS records.
CVE-1999-0195 vulnerability affects the RPC portmapper service, allowing attackers to register or unregister RPC services and spoof RPC services using a spoofed source IP address like 127.0.0.1.
RIP v1 is susceptible to spoofing, which can lead to the falsification of routing information in the network.
The rwho/rwhod service is running, which exposes machine status and user information.
The WinNuke vulnerability in Windows 95/NT allows for a DoS attack via the NETBIOS port, leading to remote system lockup.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS