CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The UUCP service is running, which may lead to unauthorized access to the system.
The PIM software for Royal daVinci does not properly password-protect access to data stored in the .mdb (Microsoft Access) file, allowing local users to read the data without a password by directly accessing the files with another application, such as Access.
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
Win32 ICQ 98a 1.30 and possibly other versions do not display the entire portion of long filenames. This could allow attackers to send executable files with long names that contain so many spaces that the .exe extension is not displayed, potentially misleading users about the safety of the file.
Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
The mail server is configured to allow SMTP mail relay, which can be exploited by spammers.
An application-critical Windows NT registry key has an inappropriate value.
CVE-1999-0698 affects the IP protocol logger (ippl) service on Red Hat and Debian Linux, which is vulnerable to denial of service attacks.
An application-critical Windows NT registry key has inappropriate permissions.
The ugidd RPC interface allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
A component service related to NIS+ is running.
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
WinGate is being used, which may lead to potential security threats.
The OS/2 or POSIX subsystem in NT is enabled, which may lead to unauthorized access or exploitation of the system.
The rsh/rlogin service is running, which may lead to unauthorized access to the system.
The discard service is running, which may lead to unauthorized access or resource exploitation.
The chargen service is running, which may lead to unauthorized use of system resources.
The daytime service is running, which may lead to unauthorized access to time-related information.