CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
The Windows NT system's registry audit policy does not log event successes or failures for security-critical registry keys.
The ugidd RPC interface allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
IIS 4.0 and Apache log HTTP request methods, regardless of their length, allowing a remote attacker to hide the actual URL they are requesting.
A system-critical NETBIOS/SMB share has inappropriate access control.
Win32 ICQ 98a 1.30 and possibly other versions do not display the entire portion of long filenames. This could allow attackers to send executable files with long names that contain so many spaces that the .exe extension is not displayed, potentially misleading users about the safety of the file.
The netstat service is running, which allows remote attackers to obtain sensitive information.
CVE-1999-0205 vulnerability affects Sendmail versions 8.6.11 and 8.6.12, where a flaw leads to a denial of service attack.
Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can read text from a user's clipboard when the user accesses documents with ActiveX content.
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
SSH version 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
mysqld in MySQL 3.21 creates log files with world-readable permissions, allowing local users to obtain passwords for users in the user database.
Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program.
The BackWeb client stores the username and password in cleartext in the Communication registry key, which could allow other local users to gain privileges by reading the password.
The RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, allowing local users to gain administrator privileges.
Linux PAM modules allow local users to gain root access using temporary files.
Remote attackers can perform a denial of service attack using fcagent in IRIX.