CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.02)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2023-36533
High

Uncontrolled resource consumption in Zoom SDKs before version 5.14.7 may allow an unauthenticated user to trigger a denial of service attack via network access.

CVE-2023-35390
HighEPSS 81%

A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.

CVE-2023-35388
HighEPSS 93%

A vulnerability in Microsoft Exchange Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

CVE-2023-35387
HighEPSS 61%

A vulnerability in the Windows Bluetooth A2DP driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.

CVE-2023-35386
HighEPSS 92%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35383
HighEPSS 86%

A vulnerability in Microsoft Message Queuing allows for information disclosure, potentially leading to unauthorized access to sensitive data.

CVE-2023-35382
HighEPSS 92%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35381
HighEPSS 78%

A vulnerability in the Windows Fax Service allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

CVE-2023-35380
HighEPSS 88%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35379
High

The vulnerability in the Reliability Analysis Metrics Calculation Engine (RACEng) allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges within the system.

CVE-2023-35378
High

A vulnerability in the Windows Projected File System allows for elevation of privilege, potentially leading to unauthorized access to the system.

CVE-2023-35372
HighEPSS 59%

A vulnerability in Microsoft Office Visio allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the compromised device.

CVE-2023-35371
HighEPSS 59%

A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or links.

CVE-2023-35368
HighEPSS 83%

A vulnerability in Microsoft Exchange allows for remote code execution, potentially leading to system takeover. An attacker can exploit this flaw to execute arbitrary code on the Exchange server.

CVE-2023-35359
HighEPSS 95%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-29330
HighEPSS 79%

Remote code execution vulnerability in Microsoft Teams. An attacker could exploit it to execute code on the victim's computer.

CVE-2023-29328
HighEPSS 80%

Remote code execution vulnerability in Microsoft Teams. An attacker could exploit this flaw to execute code on the victim's system.

CVE-2023-37646
High

A vulnerability in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to perform a directory traversal.

CVE-2023-38773
High

In version 5.0.0 of ChurchCRM, there is an SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within /QueryView.php.

CVE-2023-38771
High

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within /QueryView.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS