CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.10)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0886 vulnerability affects RASMAN, allowing users to point to an alternate location via the Windows NT Service Control Manager.
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
WWWBoard has a default username and default password, which poses a risk of unauthorized access.
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
WWWBoard stores encrypted passwords in a password file that is under the web root, making it accessible to remote attackers.
The Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, such as telnet.
The dtspcd daemon in CDE allows local users to execute arbitrary commands via a symlink attack.
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
The vulnerability in guestbook.pl involves improper cleansing of user-inserted SSI commands, allowing remote attackers to execute arbitrary commands.
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
The ToolTalk ttsession daemon uses weak RPC authentication, allowing a remote attacker to execute commands.
Computalynx CMail SMTP servers version 2.4 and 2.3 SP2 are vulnerable to a buffer overflow attack in the MAIL FROM command, which may allow a remote attacker to execute arbitrary code on the server.
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, known as the 'ImportExportFavorites' vulnerability.
SCO Doctor allows local users to gain root privileges through a Tools option.
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
A buffer overflow in TenFour TFS Gateway SMTP mail server version 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
Cisco Catalyst 2900 VLAN switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.
Buffer overflow in the inews program in INN may lead to unauthorized access or execution of malicious code.
Buffer overflows in the Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS