CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
The Internet Anywhere POP3 Mail Server version 2.3.1 is vulnerable to a denial of service attack that can cause the server to crash. Attackers can exploit LIST, TOP, or UIDL commands using letters as arguments to trigger this issue.
CVE-1999-0880 affects WU-FTPD, where the SITE NEWER command improperly manages memory, leading to a denial of service.
Internet Anywhere Mail Server version 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from this file.
Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
ARCAD Systemhaus version 0.078-5 installs critical programs and files with world-writable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.
The mknod command in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
Arkiea nlservd allows remote attackers to conduct a denial of service.
KVIrc IRC client 0.9.0 has a directory traversal vulnerability when the 'Listen to !nick <soundname> requests' option is enabled. This allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) version 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
CVE-1999-0908 affects the Solaris TCP streams service, which can be exploited by a malicious connection, causing the server to panic due to recursive calls to mutex_enter.
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Buffer overflow in the Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch may lead to unauthorized access.
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could lead to it being cached by a proxy and inadvertently used by a different user.
Kodak/Wang ActiveX controls for Internet Explorer 4.01 and 5.0 are marked as 'Safe for Scripting', allowing remote attackers to create and modify files and execute arbitrary commands.
The vulnerability in download.cgi version 1.0 allows remote attackers to read arbitrary files by exploiting the .. (dot dot) sequence in the f parameter.