CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
A vulnerability in dbsnmp in Oracle Intelligent Agent allows local users to gain elevated privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to locate the nmiconf.tcl script.
The 3Com HiPer Access Router Card (HiperARC) versions 4.0 through 4.2.29 is vulnerable to a denial of service attack that can cause the device to reboot. Attackers can exploit this by flooding the telnet port with IAC packets.
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
Vulnerability in IIS 4.0 allows a denial of service attack by flooding the server with HTTP requests containing malformed headers.
The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
The Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, potentially leading to a denial of service.
Check Point FireWall-1 is vulnerable to a denial of service attack that can be executed via UDP packets sent through VPN-1 to port 0 of a host.
Buffer overflow in ALMail32 POP3 client occurs via From: or To: headers. This may lead to unauthorized access or application crashes.
FlowPoint DSL router firmware versions prior to 3.0.8 allow a remote attacker to exploit a password recovery feature from the network, enabling brute force password guessing.
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
Buffer overflow in ToxSoft NextFTP client occurs when executing the CWD command.
Buffer overflow in Fujitsu Chocoa IRC client occurs via IRC channel topics.
The FTP client in Midnight Commander (mc) before version 4.5.11 stores usernames and passwords for visited sites in plaintext in a world-readable history file.
CVE-1999-0683 affects the Gauntlet Firewall, which is vulnerable to a denial of service (DoS) attack via a malformed ICMP packet. An attacker can exploit this vulnerability to disrupt access to services protected by the firewall.
The default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
Buffer overflow in Microsoft Phone Dialer (dialer.exe) caused by a malformed entry in the dialer.ini file.
The Windows NT messenger service is vulnerable to a denial of service (DoS) attack caused by a long username.