CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.17)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
ICMP redirect messages may crash or lock up a host.
A Windows NT user has inappropriate rights or privileges, which may include acting as System, adding workstations, or changing system time.
CVE-1999-0251 vulnerability affects the talk program, allowing remote attackers to disrupt a user's display, leading to denial of service.
The FormMail CGI program can be used by web servers other than the host server that it resides on.
A default SNMP community name (e.g. public), null, or missing can lead to unauthorized access to network devices.
NFS allows users to use a 'cd ..' command, enabling access to directories outside the exported file system.
A Windows NT account policy has inappropriate security-critical settings for lockout, such as lockout duration and the number of bad logon attempts, which may lead to unauthorized access.
Windows NT crashes or locks up when a Samba client executes a 'cd ..' command on a file share.
The 'quote cwd' command on FTP servers can reveal the full path of the home directory of the 'ftp' user.
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
Oversized ICMP ping packets can result in a denial of service, known as Ping o' Death.
A vulnerability in Sendmail allows the use of alias decoding to overwrite sensitive files.
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
CVE-1999-0075 vulnerability affects the wu-ftpd daemon, which generates a core dump in response to a QUOTE PASV command after an attacker specifies a username and password.
Bash treats any character with a value of 255 as a command separator, which can lead to unexpected behavior in scripts.
The gwind program in HP-UX allows users to modify arbitrary files.
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.