CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.17)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0524 vulnerability allows ICMP information such as netmask and timestamp to be received from arbitrary hosts.
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, violating the Java security model.
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs and hiding activities.
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
Oracle Webserver 2.1 allows remote attackers to cause a denial of service via a long HTTP GET request when serving PL/SQL stored procedures.
CVE-1999-0026 allows root privileges to be gained via a buffer overflow in the pset command on SGI IRIX systems.
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
Websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver).
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
RIP v1 is susceptible to spoofing, which can lead to the falsification of routing information in the network.
CVE-1999-0184 affects the bind DNS server, which, when compiled with the -DALLOW_UPDATES option, allows dynamic updates. This creates a potential for malicious modification of DNS records.
TCP ports are sequentially allocated, allowing for spoofing attacks.
The WinNuke vulnerability in Windows 95/NT allows for a DoS attack via the NETBIOS port, leading to remote system lockup.
CVE-1999-0195 vulnerability affects the RPC portmapper service, allowing attackers to register or unregister RPC services and spoof RPC services using a spoofed source IP address like 127.0.0.1.
The rwho/rwhod service is running, which exposes machine status and user information.
The wu-ftpd FTP daemon allows any user and password combination.
Buffer overflow in wu-ftp from PASV command causes a core dump.
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
The rsh daemon (rshd) generates different error messages based on whether a valid username is provided or not, allowing remote attackers to determine valid users on the system.