CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.17)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
Oracle Webserver 2.1 allows remote attackers to cause a denial of service via a long HTTP GET request when serving PL/SQL stored procedures.
CVE-1999-0026 allows root privileges to be gained via a buffer overflow in the pset command on SGI IRIX systems.
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
Websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver).
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
CVE-1999-0184 affects the bind DNS server, which, when compiled with the -DALLOW_UPDATES option, allows dynamic updates. This creates a potential for malicious modification of DNS records.
TCP ports are sequentially allocated, allowing for spoofing attacks.
CVE-1999-0195 vulnerability affects the RPC portmapper service, allowing attackers to register or unregister RPC services and spoof RPC services using a spoofed source IP address like 127.0.0.1.
The rwho/rwhod service is running, which exposes machine status and user information.
The WinNuke vulnerability in Windows 95/NT allows for a DoS attack via the NETBIOS port, leading to remote system lockup.
Buffer overflow in wu-ftp from PASV command causes a core dump.
The wu-ftpd FTP daemon allows any user and password combination.
RIP v1 is susceptible to spoofing, which can lead to the falsification of routing information in the network.
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
The rsh daemon (rshd) generates different error messages based on whether a valid username is provided or not, allowing remote attackers to determine valid users on the system.
A file descriptor leak in the getcwd() function in FTP has been detected, which may lead to the disclosure of directory path information.
CVE-1999-0275 affects DNS servers in Windows NT that can be overwhelmed by flooding port 53 with too many characters.
CVE-1999-0281 vulnerability involves a denial of service attack in IIS that can be triggered by sending long URLs.