CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0214 vulnerability allows denial of service attacks by sending forged ICMP 'unreachable' packets.
The portmapper may act as a proxy, redirecting service requests from an attacker, making them appear to come from the local host. This could lead to bypassing authentication that would otherwise take place.
SunOS 4.1.2 and earlier allows local users to gain privileges via 'LD_*' environmental variables to certain dynamically linked setuid or setgid programs such as login, su, or sendmail.
The FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, allowing remote attackers to execute arbitrary commands.
AIX passwd allows local users to gain root access.
The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.
Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.
Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk().
TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.
The default configuration of the NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an 'ftp=yes' line, allowing remote attackers to read and modify arbitrary files.
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs such as makeinstall or winstall.
The 'me' user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
The chroot service in Digital Ultrix 4.1 and 4.0 is insecurely installed, allowing local users to gain elevated privileges.
Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.
Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments.
Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh).
TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges.