CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Linux PAM modules allow local users to gain root access using temporary files.
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions, including the setgid bit.
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange creates a log file, exchverify.log, which contains usernames and passwords in plaintext.
The CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, allowing others with physical access to log in with any string.
NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection.
Routed allows attackers to append data to files.
CVE-1999-0053 is a denial of service (DoS) vulnerability in FreeBSD that exploits TCP RST packets. An attacker can remotely initiate a connection reset, leading to service disruption.
The TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means.
IBM/Tivoli OPC Tracker Agent version 2 release 1 is vulnerable to a denial of service attack that can be triggered by malformed data sent to the localtracker client port (5011). This attack prevents the connection from being closed properly.
A malicious Palace server can force a client to execute arbitrary programs.
The Windows NT guest account is enabled, which may lead to unauthorized access to the system.
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop.
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
The SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character.
iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
CVE-1999-0779 vulnerability affects the recserv program in HP-UX SharedX, which is susceptible to a denial of service attack.
A vulnerability in wwwboard allows a remote attacker to delete message board articles via a malformed argument.
The 'established' keyword in some Cisco IOS software allowed an attacker to bypass filtering.