CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Routed allows attackers to append data to files.
The automountd (autofsd) services in IRIX and AIX allow remote users to execute commands as root.
CVE-1999-0053 is a denial of service (DoS) vulnerability in FreeBSD that exploits TCP RST packets. An attacker can remotely initiate a connection reset, leading to service disruption.
Buffer overflow in NFS mountd allows remote attackers to gain root access, primarily on Linux systems.
Buffer overflow in dbadmin CGI program version 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
The TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means.
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions that are world-readable and world-writable. This could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
IBM/Tivoli OPC Tracker Agent version 2 release 1 is vulnerable to a denial of service attack that can be triggered by malformed data sent to the localtracker client port (5011). This attack prevents the connection from being closed properly.
A malicious Palace server can force a client to execute arbitrary programs.
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, known as untrusted scripted paste.
The Windows NT guest account is enabled, which may lead to unauthorized access to the system.
A Windows NT domain user or administrator account has a guessable password.
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root or modify system parameters.
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop.
Various modems that do not implement a guard time or are configured with a guard time of 0 can allow remote attackers to execute arbitrary modem commands via a '+++' sequence in ICMP packets, the subject of an e-mail message, IRC commands, and others.
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
The SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character.