CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as a Routing Information Field (RIF) field with a hop count greater than 7 or a list containing duplicate Token Ring IDs.
Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.
A vulnerability in Internet Explorer 3.02 and 4.0 that causes automatic resending of authentication information to the second site during a redirect.
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, allowing local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
The ip_input.c file in BSD-derived TCP/IP implementations contains a vulnerability that allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
The AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service.
Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.
CVE-2000-0014 vulnerability affects the Savant web server, which is susceptible to a denial of service (DoS) attack by injecting a null character in the requested URL.
The resend command in Majordomo allows local users to gain privileges via shell metacharacters.
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.
The pis and mkpis commands in UnixWare allow local users to gain elevated privileges via a symlink attack.
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
There is a buffer overflow in Netscape Communicator before version 4.7 caused by a dynamic font whose length field is less than the size of the font.
RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.