CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service.
The resend command in Majordomo allows local users to gain privileges via shell metacharacters.
Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
CVE-2000-0014 vulnerability affects the Savant web server, which is susceptible to a denial of service (DoS) attack by injecting a null character in the requested URL.
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
The pis and mkpis commands in UnixWare allow local users to gain elevated privileges via a symlink attack.
Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
There is a buffer overflow in Netscape Communicator before version 4.7 caused by a dynamic font whose length field is less than the size of the font.
RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.
The Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, allowing remote attackers to use the server as an amplifier in a 'Smurf' style attack on another host by spoofing the connection request.
The vulnerability in Solaris dmispd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled 'remember passwords.'
Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, known as the 'HTML Mail Attachment' vulnerability.
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
The Lotus Domino HTTP server does not properly disable anonymous access to the cgi-bin directory, which may lead to unauthorized access to resources.
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll.
Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.