CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SSH versions 1.2.25, 1.2.23, and others, when used in CBC or CFB modes, allow remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet.
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
Sun's ftpd daemon can be subjected to a denial of service.
The Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, allowing remote attackers to cause a denial of service.
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass desktop protection. This can be achieved by using <CTRL><ALT><DEL> to kill processes in the task manager, booting the system from a separate disk, or interrupting certain processes during system boot.
An account on a router, firewall, or other network device has a default, null, blank, or missing password.
A Unix account has a guessable password.
In IIS, remote attackers can obtain source code for ASP files by appending '::$DATA' to the URL.
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) are vulnerable to denial of service attacks. Remote attackers can send a flood of malformed packets, causing the server to slow down and fill the event logs with error messages.
Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.
Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106.
Buffer overflow in AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Denial of Service vulnerability in BIND 8 Releases that can be exploited via maliciously formatted DNS messages.
Stalker Internet Mail Server version 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Network Flight Recorder (NFR) versions 1.5 and 1.6 are vulnerable to a denial of service attack that can crash the nfrd service. Attackers can achieve this by sending a TCP packet with a null header and data field.
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 that can be exploited via CNAME record and zone transfer.
The ipxchk and ipxlink programs in SGI OS2 IRIX 6.3 do not properly clear the IFS environmental variable before executing system calls, allowing local users to execute arbitrary commands.
A directory traversal vulnerability in the pfdispaly.cgi program (also referred to as 'pfdisplay') for SGI's Performer API Search Tool allows remote attackers to read arbitrary files.
CVE-1999-0257 vulnerability concerns a teardrop attack variant that exploits IP fragmentation to cause a denial of service (DoS). This attack involves sending specially crafted packets that can lead to system crashes.