CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The 'AEDebug' registry key is installed with insecure permissions, allowing local users to modify the key to specify a Trojan Horse debugger that is automatically executed on a system crash.
In Windows NT and Windows 2000, when an administrator changes a user policy, the policy is not properly updated if the local ntconfig.pol file is not writable by the user. This could allow local users to bypass restrictions that would otherwise be enforced by the policy.
The snmpd server in the cmu-snmp package before version 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.
A vulnerability in Internet Explorer 3.02 and 4.0 that causes automatic resending of authentication information to the second site during a redirect.
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, known as the IIS 'GET' vulnerability.
The FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) by establishing many simultaneous passive (PASV) connections.
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU.
Vulnerabilities in DECnet/OSI for OpenVMS before version 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service.
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as a Routing Information Field (RIF) field with a hop count greater than 7 or a list containing duplicate Token Ring IDs.
thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
The vulnerability exists in Linux 2.2.10 and earlier and FreeBSD 3.2 when NAT is enabled. It allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
Squid version 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
The sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
The snprintf function in the db library version 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.
Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.