CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A file descriptor leak in the getcwd() function in FTP has been detected, which may lead to the disclosure of directory path information.
CVE-1999-0275 affects DNS servers in Windows NT that can be overwhelmed by flooding port 53 with too many characters.
The rpcbind service in Solaris listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
CVE-1999-0144 vulnerability affects Qmail and allows for a denial of service attack by specifying a large number of recipients using the RCPT command.
Buffer overflow in bootpd version 2.4.3 and earlier due to a long boot file location.
CVE-1999-0281 vulnerability involves a denial of service attack in IIS that can be triggered by sending long URLs.
Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
There is a race condition in the signal handling routine in ftpd, allowing read/write of arbitrary files.
Buffer overflow in suidperl (sperl) in Perl versions 4.x and 5.x may lead to unauthorized system access.
Vulnerability in the runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs.
Buffer overflow in the AIX lquerylv program allows local users to gain root access.
The IRIX login program with a nonzero LOCKOUT parameter allows for the creation or damage of files.
CVE-1999-0259 affects the cfingerd tool, which allows listing all users on a system via a query in the format search.@target.
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
In Solaris 2.x, SunOS 4.x, and other BSD-based operating systems prior to version 4.4, access permissions for UNIX domain sockets are ignored. This could allow local users to connect to the socket and potentially disrupt or control the operations of the program using that socket.
The vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.
Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters.
Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.