CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.10)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A WWW server is not running in a restricted file system, allowing access to system-critical data.
A filter in a router or firewall allows unusual fragmented packets.
A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
An event log in Windows NT has inappropriate access permissions.
A system-critical Windows NT registry key has inappropriate permissions, which may lead to unauthorized access or modification.
A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
A network intrusion detection system (IDS) does not properly reassemble fragmented packets, which may lead to incomplete traffic analysis.
A critical Windows NT registry key has an inappropriate value.
The NT Alerter and Messenger services are running, which may lead to unauthorized access to information.
The discard service is running, which may lead to unauthorized access or resource exploitation.
The rsh/rlogin service is running, which may lead to unauthorized access to the system.
The OS/2 or POSIX subsystem in NT is enabled, which may lead to unauthorized access or exploitation of the system.
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
A component service related to NIS+ is running.
An application-critical Windows NT registry key has an inappropriate value.
CVE-1999-0698 affects the IP protocol logger (ippl) service on Red Hat and Debian Linux, which is vulnerable to denial of service attacks.
The cfingerd service in Linux could be exploited to gain root access.
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
Attackers can crash the IRC server, leading to a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS