CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0569 vulnerability concerns WWW directories that allow auto-indexing. If a directory does not contain an index.html file, users can obtain a list of all files in that directory.
A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
A vulnerability in Sendmail allows input to be piped to a program via an alias.
A system-critical Windows NT file or directory has inappropriate permissions, which may lead to unauthorized access or modification of data.
The rpc.admind service in Solaris is not running in a secure mode, which may lead to unauthorized access.
Windows NT automatically logs in an administrator upon rebooting.
A Unix account with a name other than 'root' has UID 0, meaning it has root privileges.
NFS exports system-critical data to the world, which may include the root directory or a password file.
The system is operating in 'promiscuous' mode, allowing for packet sniffing.
A service or application has a backdoor password that was placed there by the developer.
A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location.
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
Buffer overflow in ircd allows arbitrary command execution.
Attackers can crash the IRC server, leading to a denial of service.
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
An application-critical Windows NT registry key has an inappropriate value.
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS