CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain administrative privileges.
A remote code execution vulnerability in Microsoft Exchange Server.
Kaseya VSA before 9.5.7 allows credential disclosure. The default download page (dl.asp) is unauthenticated and generates KaseyaD.ini with Agent_Guid and AgentPassword, which can be used to obtain a sessionId and bypass authentication.
A remote code execution vulnerability exists in the Windows Print Spooler service due to improper privileged file operations. An attacker can exploit it to run arbitrary code with SYSTEM privileges, allowing them to install programs, modify data, or create accounts with full user rights. Microsoft has released security updates, but additional registry and Group Policy settings must be verified.
A remote code execution vulnerability in Windows Print Spooler allows an attacker to execute arbitrary code with system privileges.
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.
W Arm Trusted Firmware M do wersji 1.2, świat NS może wywołać zatrzymanie systemu, nadpisanie danych zabezpieczonych lub wydrukowanie danych zabezpieczonych podczas wywoływania funkcji zabezpieczonych w trybie obsługi NSPE.
A vulnerability in GitLab CE/EE from version 11.9 allows remote code execution due to improper validation of image files passed to a parser.
Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.
Vulnerability in SonicWall Email Security version 10.0.9.x allows a post-authenticated attacker to upload an arbitrary file to the remote host.
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
A Server Side Request Forgery (SSRF) vulnerability in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the API to perform an SSRF attack to steal administrative credentials.
Internet Explorer Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.
Microsoft Office Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.
A memory corruption vulnerability in Internet Explorer that could allow remote code execution.
A remote code execution vulnerability in Microsoft Exchange Server allows an attacker to execute arbitrary code in the context of the system on the Exchange server.
A remote code execution vulnerability in Microsoft Exchange Server allows an attacker to execute arbitrary code on the server.
A remote code execution vulnerability in Microsoft Exchange Server allows an attacker to execute arbitrary code on the server.
Microsoft Exchange Server contains a remote code execution vulnerability. This vulnerability can be exploited by an attacker to execute arbitrary code on the server.