CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The entropy seeding mechanism used in the cryptocurrency wallet Libbitcoin Explorer versions 3.0.0 to 3.6.0 is weak, allowing remote attackers to recover wallet private keys and steal funds. This issue is known as the Milk Sad.
Versions of Zoom Client SDK before 5.15.5 may expose sensitive information, allowing an authenticated user to trigger a denial of service attack via network access.
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.
Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable information disclosure via local access.
The ASUS RT-AC66U B1 router with firmware version 3.0.0.4.286_51665 was found to transmit sensitive information in cleartext.
An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code due to not restricting the search path for required DLLs and not verifying the signature.
In go-libp2p, prior to versions 0.27.8, 0.28.2, and 0.29.1, a malicious peer can use large RSA keys to perform a resource exhaustion attack, forcing a node to spend time verifying signatures of the large key.
A vulnerability in .NET and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application or service unavailability. An attacker can exploit this flaw to disrupt system operations.
A vulnerability in ASP.NET allows for elevation of privilege, potentially leading to unauthorized access to system resources.
.NET Framework vulnerability allows spoofing, potentially leading to unauthorized access to systems or data.
A vulnerability in Windows Mobile Device Management allows for privilege escalation. An attacker can exploit this flaw to gain higher privileges on the device.
A vulnerability in Microsoft Exchange Server allows for remote code execution by an attacker. Exploiting this flaw could lead to system takeover.
A vulnerability in the LDAP protocol in Windows allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in Microsoft Exchange Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in Microsoft Exchange Server allows attackers to spoof other email addresses. Exploiting this flaw could lead to email communication fraud.
A vulnerability in .NET Core and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application unavailability.
A vulnerability in Azure Arc-Enabled Servers allows for elevation of privilege, potentially leading to unauthorized access to system resources.
A vulnerability in Microsoft Windows Defender allows for elevation of privilege, potentially leading to unauthorized access to the system.
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service. Exploiting this flaw may result in MSMQ service unavailability.
The vulnerability in HEVC Video Extensions allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS