CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0846 affects MDaemon 2.7 and involves a denial of service attack that can be executed through a large number of connection attempts.
ZBServer Pro allows remote attackers to read source code for executable files by inserting a dot (.) into the URL.
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Buffer overflow in FreeBSD angband allows local users to gain privileges.
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off. This may allow that user to modify the location of folders accessed by later users.
The web interface server of Symantec Mail-Gear 1.0 allows remote users to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in the free internet chess server (FICS) program, xboard, may lead to unauthorized access or system crashes.
CVE-1999-0844 vulnerability affects MDaemon WorldClient and WebConfig services, which are susceptible to denial of service (DoS) attacks via a long URL.
Cabletron SmartSwitch Router (SSR) 8000 with firmware 2.x can only handle 200 ARP requests per second, allowing a denial of service attack to succeed by flooding the router with ARP requests exceeding that limit.
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, allowing local users to obtain passwords and gain privileges by reading wtmp, e.g., via the last command.
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
CVE-1999-0831 vulnerability affects the syslogd service in Linux, which is susceptible to a denial of service (DoS) attack through a large number of connections.
Tin version 1.40 creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file.
Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long user name or password.
The default configuration in the Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, only restricting access to the /etc/ directory. This enables remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
The Windows Media Player ActiveX object used in Internet Explorer 5.0 returns a specific error code when a file does not exist, allowing remote malicious websites to determine the existence of files on the client.