CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The visadmin.exe program in OmniHTTPD allows a remote attacker to conduct a denial of service attack via a malformed URL, resulting in the creation of a large number of temporary files.
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
The screen and rxvt programs in Red Hat Linux 6.0 do not properly set the modes of tty devices, allowing local users to write to other ttys.
CVE-1999-0772 is a denial of service vulnerability in Compaq Management Agents and the Compaq Survey Utility that can be triggered by sending a long string to port 2301.
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, allowing local users to write to other tty devices.
CVE-1999-0804 vulnerability affects Linux 2.2.x kernels, where malformed ICMP packets with unusual types, codes, and IP header lengths can lead to denial of service.
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
In IRIX 6.5 through 6.5.2, nsd exports a virtual filesystem on a UDP port, allowing remote attackers to view files and potentially cause a denial of service by mounting the nsd virtual file system.
Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631.
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the 'Save password' option.
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.
The 'Password Security' option in the Control Panel for Apple Powerbooks allows attackers with physical access to the machine to bypass security by booting from an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible.
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
Counter.exe version 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request ending in %0A (newline), leading to a malformed entry in the counter log that results in an access violation.
Counter.exe version 2.70 allows a remote attacker to cause a denial of service (hang) by sending a long argument.
BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.