CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
iPass RoamServer 3.1 creates temporary files with world-writable permissions.
The Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
A memory leak in the SNMP protocol on Windows NT 4.0 before Service Pack 4 can be exploited by remote attackers. Attackers can cause a denial of service by sending a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
CVE-1999-0015 vulnerability concerns a Teardrop attack that exploits flaws in IP packet fragmentation handling, leading to denial of service.
MIME buffer overflow in email clients, such as Solaris mailtool and Outlook, may lead to unauthorized access or execution of malicious code.
Teardrop-2 is a later variation of a denial of service attack that exploits IP packet fragmentation to disrupt system operations.
Buffer overflow in Cisco 7xx routers through the telnet service.
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, known as FTP bounce.
Buffer overflow in statd allows root privileges.
CVE-1999-0016 is a vulnerability related to a denial of service (DoS) attack on systems using the IP protocol. An attacker can exploit this vulnerability to block access to network services.
Buffer overflow in the crond program in Linux Slackware allows local users to gain root access.
CVE-1999-0193 vulnerability affects Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
The automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
Xyplex terminal server version 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering a CTRL-Z character or a question mark (? ).
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
Solaris Solstice AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, allowing local users to gain root access by modifying their password table entries.
Solaris Solstice AdminSuite versions 2.1 and 2.2 create lock files insecurely, allowing local users to gain root privileges.