CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue exists in Adobe Acrobat and Reader related to untrusted pointer dereference when handling number format dictionary entries. This can allow an attacker to access sensitive data.
A vulnerability exists in Adobe Acrobat and Reader caused by a buffer over-read in the module handling character codes for certain textual representations. Invalid input leads to computations that point to memory locations outside the valid buffer areas.
A vulnerability exists in Adobe Acrobat and Reader related to an out of bounds read in the MakeAccesible plugin when handling font data. This can lead to memory access violations, potentially resulting in code corruption or information leaks.
A use after free vulnerability exists in Adobe Acrobat and Reader in the MakeAccessible plugin, which can lead to unintended memory access. Exploiting this vulnerability may result in arbitrary code execution.
Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. An attacker sending arbitrary network traffic to the monitored port could prevent Packetbeat from properly logging other PostgreSQL traffic.
Version 1.2.0.300 of Kaspersky Embedded Systems Security contains a driver bug that leads to kernel memory corruption, potentially resulting in local privilege escalation.
In OTRS versions 6.0.x up to and including 6.0.1, 5.0.x up to and including 5.0.24, and 4.0.x up to and including 4.0.26, an attacker logged in as an agent can manipulate form parameters related to PGP and execute arbitrary shell commands with the permissions of the OTRS or web server user.
CVE-2017-10893 describes an untrusted search path vulnerability in the JPKI user's software, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The Microsoft Malware Protection Engine running on various versions of Windows and Exchange servers does not properly scan a specially crafted file, leading to remote code execution.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82736068 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730070 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730050 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or potentially other unspecified impacts by sending a DeviceIoControl request with code 0x82730030 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a system crash (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82732140 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730054 to the \.\Viragtlt device.
Podatność w oprogramowaniu TG Soft Vir.IT eXplorer Lite w wersji 8.5.42 umożliwia lokalnym użytkownikom wywołanie błędu BSOD (Blue Screen of Death) lub potencjalnie innych skutków poprzez wysłanie żądania DeviceIoControl o kodzie 0x82730008 do urządzenia \.\Viragtlt. Jest to inna podatność niż CVE-2017-16948.
Podatność w oprogramowaniu TG Soft Vir.IT eXplorer Lite w wersji 8.5.42 umożliwia lokalnym użytkownikom eskalację uprawnień lub wywołanie odmowy usługi poprzez wysłanie żądania DeviceIoControl o kodzie 0x82730020 do urządzenia \.\Viragtlt. Jest to inna podatność niż CVE-2017-17050.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) by sending a specially crafted DeviceIoControl request with code 0x82730074 to the \\.\Viragtlt device. This can lead to denial of service or other unspecified impacts.
A vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to gain privileges or cause a denial of service via an arbitrary write operation triggered by a DeviceIoControl request of 0x82730088 to the \\.\Viragtlt device.
Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, including ssid and psk_wepkey fields.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS