CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 related to buffer copying without checking input size, which can cause an NFC service restart.
Alteryx Server 2022.1.1.42590 does not verify uploaded file types. This flaw allows attackers to upload arbitrary files (e.g., JavaScript for stored XSS) via the 'type' field in a JSON document in a PUT /gallery/api/media request.
The social-media-skeleton project, implemented using PHP, MySQL, CSS, JavaScript, and HTML, has a stored XSS vulnerability in versions 1.0.0 to 1.0.3. The issue is patched in version 1.0.3.
A vulnerability in ASP.NET Core SignalR and Visual Studio allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
Users of jackson-dataformats-text for parsing TOML data may be vulnerable to Denial of Service (DOS) attacks. If the parser is running on user-supplied input, an attacker may provide content that causes the parser to crash due to stack overflow.
In Zoom clients before version 5.14.10, there is a client-side enforcement issue of server-side security that may allow a privileged user to enable information disclosure via network access.
Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may cause the MSMQ service to stop responding to requests.
A vulnerability in Azure Apache Hadoop allows attackers to spoof other services, potentially leading to unauthorized access to data.
A vulnerability in the Windows Smart Card Resource Management Server allows for a security feature bypass. An attacker could exploit this flaw to gain access to functions that should be protected.
A vulnerability in Microsoft Message Queuing allows for information disclosure, potentially leading to unauthorized access to data.
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service. Exploiting this flaw may result in service disruption of MSMQ.
A vulnerability in Windows Hyper-V allows for information disclosure, potentially leading to unauthorized access to data.
A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
The vulnerability in the Windows Wireless Wide Area Network Service (WwanSvc) allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive system data.
A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.
A vulnerability in Microsoft Outlook allows for spoofing, potentially leading to false email messages. An attacker can exploit this flaw to impersonate another user.
A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.
A vulnerability in the Windows Group Policy security feature allows for security mechanism bypass. This could lead to unauthorized access to system resources.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS