CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Denial of service vulnerability in .NET Framework.
Elevation of privilege vulnerability in Microsoft OneNote.
Tampering vulnerability in Microsoft Edge (Chromium-based).
Information disclosure vulnerability in Microsoft Office. An attacker could exploit this flaw to gain access to sensitive data.
Remote code execution vulnerability in Azure Data Box Gateway.
Information disclosure vulnerability in Windows Internet Storage Name Service (iSNS) Server.
An information disclosure vulnerability in Windows Internet Storage Name Service (iSNS) Server. Technical details are not provided in the description.
Remote code execution vulnerability in Windows Fax Service. An attacker could remotely execute arbitrary code on the vulnerable system.
Information Disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow unauthorized access to data.
An information disclosure vulnerability in the HTTP.sys component of Windows. Technical details are not provided in the description.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
In the Comfast CF-WR6110N router version V2.3.1, an incorrect access control vulnerability was found. A remote attacker on the same network can send any HTTP request to an unauthenticated page, forcing the server to generate a SESSION_ID. Using this SESSION_ID, the attacker can then perform authenticated requests.
Softr v2.0 was found to contain an HTML injection vulnerability via the Work Space Name parameter. An attacker can inject malicious HTML code that will be executed in the victim's browser.
Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via the image clipping function.
A stack overflow vulnerability was discovered in Notepad++ version 8.4.1 within the Finder::add() component. This flaw could be exploited for remote code execution or application crash.
A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through version 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter.
Relative path traversal vulnerability in Eclipse GlassFish versions 5.1.0 to 6.2.5. Unauthenticated remote attacker can access configuration files and application source code. Fixed in GlassFish 7.0.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS