CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An SSH server allows authentication through the .rhosts file, which may lead to unauthorized access.
A Windows NT log file has an inappropriate maximum size or retention period.
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets, which may lead to unauthorized access or bypassing of security measures.
In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
The rexec service is running, which may lead to unauthorized access to the system.
The Gopher service is running, which may lead to unauthorized access to data.
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
The system is running a version of software that has been replaced with a Trojan Horse at one of its distribution points. This affects TCP Wrappers 7.6, util-linux 2.9g, wuarchive ftpd (wuftpd) 2.2 and 2.1f, IRC client (ircII) ircII 2.2.9, OpenSSH 3.4p1, and Sendmail 8.12.6.
The NetWare version of LaserFiche stores usernames and passwords unencrypted and allows administrative changes without logging.
The MetaWeb web server from MetaInfo allows users to upload, execute, and read scripts, which can lead to unauthorized access to the system.
The cfingerd service in Linux could be exploited to gain root access.
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
Buffer overflow in ircd allows arbitrary command execution.
Attackers can crash the IRC server, leading to a denial of service.
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
A filter in a router or firewall allows unusual fragmented packets.
The Logon box of a Windows NT system displays the name of the last user who logged in.
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.