CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The pkgtool package in Slackware Linux 3.4 allows a local attacker to read and write to arbitrary files via a symlink attack on the reply file.
A directory traversal vulnerability in the pfdispaly.cgi program (also referred to as 'pfdisplay') for SGI's Performer API Search Tool allows remote attackers to read arbitrary files.
The System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
CVE-1999-0257 vulnerability concerns a teardrop attack variant that exploits IP fragmentation to cause a denial of service (DoS). This attack involves sending specially crafted packets that can lead to system crashes.
An account on a router, firewall, or other network device has a guessable password.
HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.
A configuration in web browsers such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
CVE-1999-0003 vulnerability allows executing commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver, but inadvertently listens on port N-1, allowing remote attackers to cause a denial of service via a large number of connections to port N-1.
Attackers can cause a denial of service in Ascend MAX and Pipeline routers by sending a malformed packet to the discard port, which is used by the Java Configurator tool.
The vulnerability in ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
The ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file.
The bdash game on Linux has a buffer overflow vulnerability that allows local users to gain root access.
A Unix account has a default, null, blank, or missing password.
UDP messages to broadcast addresses are allowed, enabling a Fraggle attack that can cause a denial of service by flooding the target.
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication, enabling them to obtain system information, disable logging, or modify caches.
Buffer overflows in the CDROM Confidence Test program (cdrom) allow local users to gain root privileges.