CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Elevation of privilege vulnerability in the Windows kernel. An attacker could exploit this flaw to gain administrator privileges.
NTFS contains an Elevation of Privilege Vulnerability that could allow an attacker to gain elevated privileges on the system.
Elevation of privilege vulnerability in Active Directory Domain Services. Allows an attacker to gain elevated privileges in the domain.
Active Directory Domain Services Elevation of Privilege Vulnerability. Technical details are not provided in the description.
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit it to run arbitrary code on the affected system.
Microsoft COM for Windows Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely on the system.
Remote Code Execution vulnerability in Windows NTFS. An attacker could exploit this vulnerability to run arbitrary code on the target system.
Windows Fast FAT File System Driver contains an Elevation of Privilege Vulnerability that could allow an attacker to gain elevated privileges on the system.
W Power BI Report Server występuje podatność na Cross-Site Scripting (XSS) oraz Cross-Site Request Forgery (CSRF), która pozwala atakującemu na przesłanie złośliwych plików szablonów Power BI (pbix) zawierających pliki HTML. Po dostępie ofiary do tych plików, atakujący może uruchomić skrypty w kontekście bezpieczeństwa użytkownika, co może prowadzić do eskalacji uprawnień, jeśli ofiara ma uprawnienia administratora.
NTFS contains an Elevation of Privilege Vulnerability that could allow an attacker to gain elevated privileges on the system.
Elevation of privilege vulnerability in NTFS. An attacker could exploit it to gain elevated privileges.
Elevation of privilege vulnerability in CredSSP. Could be exploited to escalate privileges during authentication.
Denial of service vulnerability in Windows. Allows an attacker to cause a system or service crash.
Microsoft Excel Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely on the victim's system via a specially crafted Excel file.
Remote Code Execution vulnerability in Remote Desktop Client. Details are not provided in the description.
Information disclosure vulnerability in Remote Desktop Protocol Client. An attacker could exploit this vulnerability to gain access to sensitive information.
Elevation of privilege vulnerability in Windows Desktop Bridge. Could be exploited to gain elevated privileges.
Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92.
A vulnerability in AVideo/YouPHPTube 10.0 and prior allows insecure file writes. An administrator can write files to the filesystem using flag and code variables in save.php.
A SQL Injection vulnerability in AVideo/YouPHPTube 10.0 and prior allows an unauthenticated remote attacker to inject SQL code via the catName parameter. This enables retrieval of database information, including application password hashes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS