CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.17)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Movemail in HP-UX 10.20 has insecure permissions, allowing local users to gain privileges.
The netprint program in SGI IRIX 6.4 and earlier versions trusts the PATH environmental variable for finding and executing the disable program, allowing local users to gain privileges.
CVE-1999-0274 affects DNS servers in Windows NT that may be vulnerable to a denial of service attack. An attacker can send a malicious packet containing a response to a query that was not made, leading to server disruption.
A Windows NT account policy has inappropriate security-critical settings for lockout, such as lockout duration and the number of bad logon attempts, which may lead to unauthorized access.
Windows NT crashes or locks up when a Samba client executes a 'cd ..' command on a file share.
The 'quote cwd' command on FTP servers can reveal the full path of the home directory of the 'ftp' user.
NFS allows users to use a 'cd ..' command, enabling access to directories outside the exported file system.
CVE-1999-0251 vulnerability affects the talk program, allowing remote attackers to disrupt a user's display, leading to denial of service.
The Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
A Windows NT user has inappropriate rights or privileges, which may include acting as System, adding workstations, or changing system time.
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
A default SNMP community name (e.g. public), null, or missing can lead to unauthorized access to network devices.
The FormMail CGI program can be used by web servers other than the host server that it resides on.
ICMP redirect messages may crash or lock up a host.
Oversized ICMP ping packets can result in a denial of service, known as Ping o' Death.
A vulnerability in Sendmail allows the use of alias decoding to overwrite sensitive files.
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
CVE-1999-0075 vulnerability affects the wu-ftpd daemon, which generates a core dump in response to a QUOTE PASV command after an attacker specifies a username and password.