CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0257 vulnerability concerns a teardrop attack variant that exploits IP fragmentation to cause a denial of service (DoS). This attack involves sending specially crafted packets that can lead to system crashes.
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver, but inadvertently listens on port N-1, allowing remote attackers to cause a denial of service via a large number of connections to port N-1.
Attackers can cause a denial of service in Ascend MAX and Pipeline routers by sending a malformed packet to the discard port, which is used by the Java Configurator tool.
UDP messages to broadcast addresses are allowed, enabling a Fraggle attack that can cause a denial of service by flooding the target.
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
CVE-1999-0258 vulnerability concerns the Bonk variation of teardrop IP fragmentation, leading to denial of service.
Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords.
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets, allowing remote attackers to spoof TCP connections.
A vulnerability in AOL Instant Messenger allows a remote attacker to send a malicious hyperlink to the client, potentially leading to a system crash.
CVE-1999-0087 affects the telnet service in AIX, which can freeze the system and prevent users from accessing the server.
The htmlscript CGI program allows remote read access to files.
Buffer overflow in the mailx program on SGI IRIX can lead to unauthorized access or execution of malicious code.
Progressive Networks Real Video server (pnserver) can be crashed remotely.
AIX routed allows remote users to modify sensitive files.
ICMP messages to broadcast addresses are allowed, enabling a Smurf attack that can lead to denial of service.
Local users can execute commands as other users and read other users' files through a symlink attack in the Elm elm-2.4 mail package.
CVE-1999-0273 vulnerability affects Solaris 2.5.1, where a denial of service attack can be triggered by sending ^D characters in the telnet protocol.
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
iPass RoamServer 3.1 creates temporary files with world-writable permissions.