CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-1999-0019 vulnerability allows for file deletion or creation via rpc.statd due to invalid information.
dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.
The test-cgi program allows an attacker to list files on the server.
Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
UDP services like echo and chargen can be used together to flood the server, known as a UDP bomb or UDP packet storm.
Livingston portmaster machines could be rebooted via a series of commands.
Some configurations of NIS+ in Linux allowed attackers to log in as the user '+'.
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
The SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files, potentially leading to privilege escalation.
Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.
Predictable TCP sequence numbers allow for connection spoofing.
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
Vulnerability in Support Watch (also known as SupportWatch) in HP-UX versions 8.0 through 9.0 allows local users to gain elevated privileges.
The serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, allowing local users to gain root privileges via a Trojan horse ls program.
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
The passwd program in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
Extra long export lists over 256 characters in some mount daemons allow NFS directories to be mounted by anyone.
Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.