CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
A Windows NT log file has an inappropriate maximum size or retention period.
The NT Alerter and Messenger services are running, which may lead to unauthorized access to information.
A critical Windows NT registry key has an inappropriate value.
A network intrusion detection system (IDS) does not properly reassemble fragmented packets, which may lead to incomplete traffic analysis.
The mail server is configured to allow SMTP mail relay, which can be exploited by spammers.
On some systems, the finger .@host command may display information about certain user accounts.
An attacker can force a printer to print arbitrary documents if it does not require a password, or to become disabled.
The #exec function is enabled for Server Side Include (SSI) files in IIS, which may lead to unauthorized command execution on the server.
Two or more Unix accounts have the same user identifier (UID), which can lead to authorization and resource access issues.
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
A superfluous NFS server is running, but it is not importing or exporting any file systems.
A trust relationship exists between two Unix hosts, which may lead to unauthorized access to resources.
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
CVE-1999-0285 vulnerability affects the telnet service in the Windows NT Resource Kit, allowing a denial of service attack by opening and then immediately closing a connection.
The Java Web Server allowed remote users to obtain the source code for CGI programs.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS