CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Excel allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
A vulnerability in Microsoft Excel allows security feature bypass. An attacker could exploit this flaw to bypass protective mechanisms and gain unauthorized access.
Information Disclosure vulnerability in Microsoft Word. Could allow an attacker to read data that should not be accessible.
Vulnerability allowing bypass of BitLocker security features. An attacker could bypass BitLocker protections and gain unauthorized access to encrypted data.
A vulnerability in Windows GDI+ allows information disclosure. An attacker could exploit this flaw to access sensitive data.
An information disclosure vulnerability in the RADIUS protocol in Network Policy Server (NPS) allows an attacker to gain access to sensitive data. The flaw could be exploited to intercept authentication information or other data transmitted over the network.
Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.
Denial of Service vulnerability in Windows Point-to-Point Tunneling Protocol (PPTP). Can cause failure of network services.
Windows Group Policy Elevation of Privilege Vulnerability.
Information disclosure vulnerability in Microsoft Dynamics Business Central. Could allow an attacker to read sensitive business data.
A vulnerability in .NET Framework allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
A vulnerability in Microsoft Word allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
A vulnerability in the Windows Human Interface Device driver allows information disclosure.
Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.
A vulnerability in Windows Hyper-V allows an attacker to perform a Denial of Service attack.
Shopwind v3.4.3 was discovered to contain a reflected XSS vulnerability in the /common/library/Page.php component. An attacker can inject a malicious script that executes in the victim's browser.
An off-by-one error was discovered in systemd in the format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy, leading to a buffer overrun in format_timespan() and resulting in a denial of service.
A vulnerability in multiple management dashboard pages of Cisco Umbrella allows an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Cisco Umbrella dashboard. This issue is due to unsanitized user input.
The NdkAdvancedCustomizationFields 3.5.0 plugin for ndk design is vulnerable to Cross-Site Scripting (XSS) in the createPdf.php file. This allows an attacker to inject malicious JavaScript code into the page.
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS