CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.
The SMB authentication in Windows 95 and Windows 98 has a vulnerability that allows the cryptographic challenge response to be reused. An attacker can replay this response and impersonate a user.
Buffer overflow in the Slang library in Dosemu on Linux may lead to unauthorized access or execution of malicious code.
Buffer overflow in the FTP client in the Debian GNU/Linux netstd package may lead to unauthorized access or execution of malicious code.
Buffer overflow in the BOOTP server in the Debian Linux netstd package.
The default configuration of Slackware 3.4, and possibly other versions, includes '.' (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.
The aserver program in HP-UX allows local users to gain elevated privileges via a symlink attack.
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
CVE-1999-0285 vulnerability affects the telnet service in the Windows NT Resource Kit, allowing a denial of service attack by opening and then immediately closing a connection.
The Java Web Server allowed remote users to obtain the source code for CGI programs.
The #exec function is enabled for Server Side Include (SSI) files in IIS, which may lead to unauthorized command execution on the server.
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
An attacker can force a printer to print arbitrary documents if it does not require a password, or to become disabled.
A superfluous NFS server is running, but it is not importing or exporting any file systems.
The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
The Logon box of a Windows NT system displays the name of the last user who logged in.
Off-by-one error in NcFTPd FTP server before version 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.
A network intrusion detection system (IDS) does not verify the checksum on a packet, which may lead to unauthorized access or malicious activities on the network.
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS