CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
CVE-1999-0418 vulnerability concerns a denial of service attack in SMTP applications like Sendmail. A remote attacker, such as a spammer, can exploit multiple 'RCPT TO' commands in the same connection session.
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) by connecting to port 99 and disconnecting without sending any data.
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created.
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
CVE-1999-0221 vulnerability affects Ascend routers that can be subjected to a denial of service attack through port 150, used for remote administration.
The Microsoft SMTP service, when attempting to send a message to a server and receiving a 4xx error code, quickly and repeatedly tries to redeliver the message, leading to a denial of service.
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
Remote attackers can perform a denial of service on WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
The FTP service on HP-UX 11.00 allows local users to gain elevated privileges.
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
CVE-1999-0479 affects the Netscape Enterprise Server with VirtualVault running on HP-UX VVOS systems, which may lead to a denial of service attack.
Netmanager Chameleon SMTPd has several buffer overflow vulnerabilities that can cause system crashes.
A vulnerability in the Cisco IOS web server allows attackers to remotely reboot the router by sending a long URL.
Linux kernel versions 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, leading to a denial of service.
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allow remote attackers to perform a denial of service by forcing the supervisor module to reload.