CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.17)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
CVE-1999-0216 vulnerability affects the inetd service on Linux, which can be targeted for denial of service (DoS) attacks through SYN and RST packets.
The piodmgrsu command in AIX allows local users to gain additional group privileges.
Buffer overflow in the OSF Distributed Computing Environment (DCE) security daemon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization.
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command.
The CGI PHP mlog script allows an attacker to read any file on the target server.
A vulnerability in the BSD line printer daemon (lpd) allows for file creation and deletion, as well as remote code execution.
CVE-1999-0272 vulnerability involves a denial of service attack in Slmail version 2.5 through the POP3 port.
Vulnerability in the HP-UX mediainit program may lead to unauthorized access to the system.
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
All records in a WINS database can be deleted through SNMP, leading to denial of service.
Race condition in xterm allows local users to modify arbitrary files via the logging option.
Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file with insecure permissions.
The newdsn.exe CGI script in IIS allows remote users to overwrite files.
Linux implementations of TFTP would allow access to files outside the restricted directory.
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via vuefile, vuepad, dtfile, or dtpad, which do not authenticate users.
The vulnerability in rpc.mountd on Linux, Ultrix, and possibly other operating systems allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists.
Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.
CVE-1999-0024 vulnerability involves a malicious attack on DNS cache via BIND, exploiting predictable query IDs.