CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Information disclosure vulnerability in Windows SMB. It may allow an attacker to access information that should be protected.
Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.
Information disclosure vulnerability in Windows Installer. Could allow an attacker to read sensitive data.
Denial of Service vulnerability in Windows Installer. Can lead to installation or system crashes.
Spoofing vulnerability in Windows Authenticode. Could allow an attacker to impersonate trusted software.
Information Disclosure vulnerability in Azure Sphere. Could allow an attacker to read data from memory.
Spoofing vulnerability in Visual Studio Code. An attacker could impersonate a trusted source, potentially leading to display of false information or tricking users into performing unwanted actions.
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks.
Spoofing vulnerability in Microsoft Edge for iOS. Could allow an attacker to impersonate trusted websites.
Spoofing vulnerability in Microsoft Edge for Android. Allows an attacker to impersonate trusted content.
Elevation of Privilege vulnerability in Microsoft Edge (Chromium-based). Could allow an attacker to gain elevated privileges.
Information disclosure vulnerability in Microsoft Edge for Android. Could allow access to sensitive data.
Elevation of privilege vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit this flaw to gain elevated privileges on the system.
Podatność CVE-2021-22791 dotyczy błędu zapisu poza granicami (CWE-787) w kontrolerach Modicon PLC, który może prowadzić do awarii usługi podczas aktualizacji aplikacji kontrolera za pomocą specjalnie przygotowanego pliku projektu. Dotyczy to różnych modeli kontrolerów Modicon M580, M340, MC80, Momentum oraz symulatorów PLC.
Podatność CWE-125: Odczyt poza zakresem, która może spowodować Denial of Service na kontrolerze/symulatorze Modicon PLC podczas aktualizacji aplikacji kontrolera za pomocą specjalnie przygotowanego pliku projektu. Dotyczy to różnych modeli kontrolerów Modicon M580, M340, MC80, Momentum oraz symulatorów PLC dla EcoStruxure.
Występuje podatność CWE-119: Niewłaściwe ograniczenie operacji w granicach bufora pamięci, która może spowodować Denial of Service na kontrolerze/symulatorze Modicon PLC podczas aktualizacji aplikacji kontrolera za pomocą specjalnie przygotowanego pliku projektu. Dotyczy to różnych modeli kontrolerów Modicon M580, M340, MC80, Momentum Ethernet, Quantum oraz Premium, a także symulatorów PLC dla EcoStruxure.
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background, allowing attackers to steal cookies via a crafted payload in the search box.
Elevation of privilege vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit this flaw to gain elevated privileges on the system.
Information disclosure vulnerability in Microsoft Edge (Chromium-based). It could allow an attacker to access information that should not be disclosed.
A vulnerability in Microsoft Edge (Chromium-based) allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges in the browser context.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS