CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Netscape Communicator 4.x with JavaScript enabled does not warn a user of cookie settings, even if they have selected the option 'Only accept cookies originating from the same server as the page being viewed'.
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, allowing remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files.
CVE-1999-0752 affects the Netscape Enterprise Server, where a buffer overflow during the SSL handshake can lead to a denial of service.
The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x may lead to unauthorized access or execution of malicious code.
CVE-1999-0140 is a Denial of Service (DoS) vulnerability in the RAS/PPTP protocol on NT systems, potentially leading to service unavailability.
The Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
The klock program in KDE allows local users to unlock a session using malformed input.
The mailman package in Debian uses weak authentication, allowing attackers to gain privileges.
Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
The useradd command in Solaris 7.0 does not properly interpret certain date formats specified in the '-e' (expiration date) argument, which could allow users to log in after their accounts have expired.
ssh version 2.0.12, and possibly other versions, allows valid usernames to attempt to enter the correct password multiple times, but only prompts for a password once for an invalid username. This allows remote attackers to determine user account names on the server.
The visadmin.exe program in OmniHTTPD allows a remote attacker to conduct a denial of service attack via a malformed URL, resulting in the creation of a large number of temporary files.
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
The screen and rxvt programs in Red Hat Linux 6.0 do not properly set the modes of tty devices, allowing local users to write to other ttys.
CVE-1999-0804 vulnerability affects Linux 2.2.x kernels, where malformed ICMP packets with unusual types, codes, and IP header lengths can lead to denial of service.
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, allowing local users to write to other tty devices.
CVE-1999-0772 is a denial of service vulnerability in Compaq Management Agents and the Compaq Survey Utility that can be triggered by sending a long string to port 2301.