CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
The default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
A vulnerability in dbsnmp in Oracle Intelligent Agent allows local users to gain elevated privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to locate the nmiconf.tcl script.
Buffer overflow in the hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via the m_invite invite option.
The 3Com HiPer Access Router Card (HiperARC) versions 4.0 through 4.2.29 is vulnerable to a denial of service attack that can cause the device to reboot. Attackers can exploit this by flooding the telnet port with IAC packets.
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
A race condition in the SSL ISAPI filter in IIS and other servers may lead to information leakage in plaintext.
Vulnerability in IIS 4.0 allows a denial of service attack by flooding the server with HTTP requests containing malformed headers.
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
CVE-1999-0694 vulnerability concerns the ptrace system call in AIX, allowing local users to crash the system.
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
The Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, potentially leading to a denial of service.
The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Check Point FireWall-1 is vulnerable to a denial of service attack that can be executed via UDP packets sent through VPN-1 to port 0 of a host.
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
Buffer overflow in ALMail32 POP3 client occurs via From: or To: headers. This may lead to unauthorized access or application crashes.
FlowPoint DSL router firmware versions prior to 3.0.8 allow a remote attacker to exploit a password recovery feature from the network, enabling brute force password guessing.