CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: 29/09/2026(UTC) (v2026.09.29)

All Critical High Medium Low Actively exploited134,351 results

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

CriticalActively exploited

17/02/2023(UTC)

IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2.

17/02/2023(UTC)

A vulnerability in the firmware of the Arris TG2482A router up to version 9.1.103GEM9 allows remote code execution (RCE) via the ping utility feature. An attacker can exploit this flaw to gain control over the device.

17/02/2023(UTC)

Podatność CVE-2023-0882 dotyczy niewłaściwej walidacji danych wejściowych oraz obejścia autoryzacji w aplikacji Kron Tech Single Connect na systemie Windows, co umożliwia nadużycie uprawnień. Problem ten dotyczy wersji Single Connect: 2.16.

16/02/2023(UTC)

Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.

MediumActively exploited

16/02/2023(UTC)

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

14/02/2023(UTC)

Visual Studio contains a Remote Code Execution Vulnerability that could allow an attacker to execute arbitrary code in the context of the logged-in user.

HighActively exploitedEPSS 92%

14/02/2023(UTC)

Windows Graphics Component Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.

14/02/2023(UTC)

Remote code execution vulnerability in Visual Studio. An attacker could exploit this flaw to execute arbitrary code in the user's context.

14/02/2023(UTC)

Remote code execution vulnerability in .NET and Visual Studio. An attacker could exploit it to run malicious code.

14/02/2023(UTC)

Remote code execution vulnerability in Microsoft Dynamics Unified Service Desk. Allows an attacker to execute code remotely.

14/02/2023(UTC)

Denial of Service vulnerability in Visual Studio.

14/02/2023(UTC)

Elevation of privilege vulnerability in Visual Studio. Could be exploited to gain elevated privileges in the development environment.

14/02/2023(UTC)

Remote Code Execution vulnerability in Azure DevOps Server. An attacker could exploit this vulnerability to run arbitrary code on the server.

14/02/2023(UTC)

3D Builder Remote Code Execution Vulnerability

14/02/2023(UTC)

An information disclosure vulnerability in Azure Machine Learning Compute Instance. An attacker could exploit this to gain unauthorized access to data.

14/02/2023(UTC)

Microsoft Defender for IoT contains an Elevation of Privilege Vulnerability that could allow an attacker to gain elevated privileges on the system.

14/02/2023(UTC)

Print 3D Remote Code Execution Vulnerability

14/02/2023(UTC)

3D Builder Remote Code Execution Vulnerability

HighActively exploitedEPSS 96%

14/02/2023(UTC)

Windows Common Log File System Driver Elevation of Privilege Vulnerability.

14/02/2023(UTC)

Remote code execution vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit it to execute code in the browser context.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS