CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
A memory leak in the SNMP protocol on Windows NT 4.0 before Service Pack 4 can be exploited by remote attackers. Attackers can cause a denial of service by sending a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
CVE-1999-0015 vulnerability concerns a Teardrop attack that exploits flaws in IP packet fragmentation handling, leading to denial of service.
MIME buffer overflow in email clients, such as Solaris mailtool and Outlook, may lead to unauthorized access or execution of malicious code.
Teardrop-2 is a later variation of a denial of service attack that exploits IP packet fragmentation to disrupt system operations.
Buffer overflow in Cisco 7xx routers through the telnet service.
CVE-1999-0016 is a vulnerability related to a denial of service (DoS) attack on systems using the IP protocol. An attacker can exploit this vulnerability to block access to network services.
CVE-1999-0193 vulnerability affects Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
Solaris Solstice AdminSuite versions 2.1 and 2.2 create lock files insecurely, allowing local users to gain root privileges.
Solaris Solstice AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, allowing local users to gain root access by modifying their password table entries.
Solaris Solstice AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
Solaris Solstice AdminSuite 2.1 follows symbolic links when updating an NIS database, allowing local users to overwrite arbitrary files.
Solaris Solstice AdminSuite versions 2.1 and 2.2 allow local users to gain elevated privileges via the save option in the Database Manager, which is running with setgid bin privileges.
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
CVE-1999-0216 vulnerability affects the inetd service on Linux, which can be targeted for denial of service (DoS) attacks through SYN and RST packets.
The piodmgrsu command in AIX allows local users to gain additional group privileges.
Buffer overflow in the OSF Distributed Computing Environment (DCE) security daemon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization.
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command.
The CGI PHP mlog script allows an attacker to read any file on the target server.
A vulnerability in the BSD line printer daemon (lpd) allows for file creation and deletion, as well as remote code execution.