CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
The idle locking function in MacOS 9 allows local users to bypass password protection of locked sessions. A user can select the 'Log Out' option and then 'Cancel' in the dialog box, which returns them to the locked session.
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in calls to SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo.
The Zeus web server administrative interface uses weak encryption for storing passwords.
Cdwtools version 093 and earlier allows local users to gain root privileges via the /tmp directory.
Linux kernel before 2.3.18 or 2.2.13pre15 with SLIP and PPP options allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.
CVE-1999-0905 affects the Axent Raptor firewall, which is vulnerable to a denial of service (DoS) attack via malformed zero-length IP options.
The ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) by sending malformed packets to the server's UDP port.
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
The HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of '.' characters.
Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to read arbitrary files via a modified '......' attack.
The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, allowing remote attackers to cause a denial of service.
Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Xsession in Red Hat Linux 6.1 and earlier allows local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome, or another level from kdm.
Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.
The NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) by sending certain packets, possibly with the Urgent (URG) flag set, to port 111.
The Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp directory as a shared directory with insecure permissions, allowing local users to send arbitrary files to the remote server and view files being transferred.
Macromedia 'The Matrix' screen saver on Windows 95 with the 'Password protected' option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC key.
Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.
Internet Anywhere Mail Server version 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from this file.