CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The systat service is running, which may lead to the disclosure of system information.
The rstat/rstatd service is running, which may lead to unauthorized access to system information.
The rpc.sprayd service is running, which may lead to unauthorized access to the system.
The NT Alerter and Messenger services are running, which may lead to unauthorized access to information.
A critical Windows NT registry key has an inappropriate value.
A filter in a router or firewall allows unusual fragmented packets.
The echo service is running, which may lead to information disclosure.
A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
The rpc.rquotad service is running, which may lead to unauthorized access to quota system information.
The ident/identd service is running, which may lead to the disclosure of user information.
A network intrusion detection system (IDS) does not properly reassemble fragmented packets, which may lead to incomplete traffic analysis.
A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
SSH version 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
Linux versions 2.1.132 and earlier allow local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.
mysqld in MySQL 3.21 creates log files with world-readable permissions, allowing local users to obtain passwords for users in the user database.
Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program.
Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via nlog-smb.pl or rpc-nlog.pl.
The BackWeb client stores the username and password in cleartext in the Communication registry key, which could allow other local users to gain privileges by reading the password.