CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before version 3.7.20 Build 286 allows local users to escalate privileges via a malformed IOCTL call.
The vulnerability in rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory locations, potentially leading to privilege escalation.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices.
An invalid memory write was discovered in copy_mp in mpglibDBL, used in MP3Gain version 1.5.2. The vulnerability may cause a denial of service (segmentation fault and application crash) or possibly unspecified other impact.
A stack-based buffer overflow was discovered in copy_mp in mpglibDBL, used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, leading to remote denial of service or possibly code execution.
A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, leading to remote denial of service or possibly code execution.
The EyesOfNetwork web interface version 5.1-0 allows remote command execution via shell metacharacters in the hosts_cacti array parameter to module/admin_device/index.php.
The EyesOfNetwork web interface version 5.1-0 allows local file inclusion via the tool_list parameter in select_tool.php.
Microsoft .NET Framework w wersjach 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 oraz 4.7 umożliwia atakującemu zdalne wykonanie kodu poprzez złośliwy dokument lub aplikację. Jest to znana jako podatność na zdalne wykonanie kodu w .NET Framework.
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way Microsoft Edge handles objects in memory.
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
A vulnerability in the Microsoft Edge scripting engine allows an attacker to execute arbitrary code in the context of the current user. The issue is due to the way the scripting engine handles objects in memory.
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.
A vulnerability in Microsoft Edge in Windows 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
A vulnerability in Microsoft browsers, including Internet Explorer and Microsoft Edge, allows an attacker to execute arbitrary code in the context of the current user. The issue arises from improper access to objects in memory.
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Internet Explorer accesses objects in memory.
Internet Explorer and Microsoft Edge in various versions of Windows allow an attacker to execute arbitrary code in the context of the current user. The issue arises from flaws in the browser's JavaScript engines when rendering content in memory.
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Internet Explorer accesses objects in memory.
A remote code execution vulnerability exists in Excel Services due to improper handling of objects in memory. This affects Microsoft Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS