CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
The cfingerd service in Linux could be exploited to gain root access.
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
mSQL version 2.0.1 and below allows remote code execution through a buffer overflow.
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using tools such as nmap or queso.
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
A trust relationship exists between two Unix hosts, which may lead to unauthorized access to resources.
Two or more Unix accounts have the same user identifier (UID), which can lead to authorization and resource access issues.
A network intrusion detection system (IDS) does not verify the checksum on a packet, which may lead to unauthorized access or malicious activities on the network.
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
The Java Web Server allowed remote users to obtain the source code for CGI programs.
The Windows NT system's registry audit policy does not log event successes or failures for non-critical registry keys.
CVE-1999-0285 vulnerability affects the telnet service in the Windows NT Resource Kit, allowing a denial of service attack by opening and then immediately closing a connection.
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
A superfluous NFS server is running, but it is not importing or exporting any file systems.
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
The RPC portmapper service is running, which may lead to unauthorized access to RPC services.