CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) by connecting to port 99 and disconnecting without sending any data.
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
IMail POP3 daemon uses weak encryption, allowing local users to read files.
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created.
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
The syslogd service in Solaris crashes when receiving a message from a host that does not have an inverse DNS entry.
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
The Microsoft SMTP service, when attempting to send a message to a server and receiving a 4xx error code, quickly and repeatedly tries to redeliver the message, leading to a denial of service.
The FTP service on HP-UX 11.00 allows local users to gain elevated privileges.
Remote attackers can perform a denial of service on WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
CVE-1999-0221 vulnerability affects Ascend routers that can be subjected to a denial of service attack through port 150, used for remote administration.
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
MC/ServiceGuard and MC/LockManager in HP-UX allow local users to gain privileges through SAM.
Linux kernel versions 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, leading to a denial of service.