CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.17)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A file descriptor leak in the getcwd() function in FTP has been detected, which may lead to the disclosure of directory path information.
CVE-1999-0275 affects DNS servers in Windows NT that can be overwhelmed by flooding port 53 with too many characters.
Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
CVE-1999-0281 vulnerability involves a denial of service attack in IIS that can be triggered by sending long URLs.
There is a race condition in the signal handling routine in ftpd, allowing read/write of arbitrary files.
CVE-1999-0259 affects the cfingerd tool, which allows listing all users on a system via a query in the format search.@target.
Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.
addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file.
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.
The SGI MachineInfo CGI program, installed by default on some web servers, displays potentially sensitive system status information that could be used by remote attackers for information gathering activities.
The KDE file manager (kfm) uses a TCP server for certain file operations, allowing remote attackers to modify arbitrary files by sending a copy command to the server.
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, allowing remote attackers to execute arbitrary commands via the run option through malicious web pages.
Windows NT 4.0 SP2 is vulnerable to a denial of service attack that may cause system crashes. Attackers can exploit malformed data or packets, leading to unpredictable system behavior.
CVE-1999-0292 vulnerability allows denial of service attacks through the use of large user names in Winpopup.
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.
CVE-1999-0228 vulnerability affects the RPCSS.EXE (RPC Locator) program in Windows NT, which is susceptible to a denial of service attack.
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
wu-ftp allows files to be overwritten via the rnfr command.
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.