CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The system is running a version of software that has been replaced with a Trojan Horse at one of its distribution points. This affects TCP Wrappers 7.6, util-linux 2.9g, wuarchive ftpd (wuftpd) 2.2 and 2.1f, IRC client (ircII) ircII 2.2.9, OpenSSH 3.4p1, and Sendmail 8.12.6.
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
The Gopher service is running, which may lead to unauthorized access to data.
The rexec service is running, which may lead to unauthorized access to the system.
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets, which may lead to unauthorized access or bypassing of security measures.
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
The netstat service is running, which allows remote attackers to obtain sensitive information.
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
An SSH server allows authentication through the .rhosts file, which may lead to unauthorized access.
Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writable by world, a real password file is obtainable, or executable commands such as 'ls' can be overwritten.
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
Anonymous FTP is enabled, allowing users to access files without authentication.
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location.
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.