CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Information disclosure vulnerability in Windows Internet Storage Name Service (iSNS) Server.
An information disclosure vulnerability in Windows Internet Storage Name Service (iSNS) Server. Technical details are not provided in the description.
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute code remotely.
Remote code execution vulnerability in Windows Fax Service. An attacker could remotely execute arbitrary code on the vulnerable system.
Information Disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow unauthorized access to data.
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
Information Disclosure vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit this vulnerability to gain access to sensitive information.
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit it to execute code in the context of the service.
Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute arbitrary code.
Elevation of privilege vulnerability in the NT OS Kernel. Allows a local attacker to gain elevated privileges on the system.
An information disclosure vulnerability in the HTTP.sys component of Windows. Technical details are not provided in the description.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Could allow an attacker to execute code.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to run arbitrary code in the context of the application.
Remote Code Execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. An attacker could exploit this vulnerability to run arbitrary code on the target system.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Remote code execution vulnerability in Microsoft SQL Server Integration Service (VS extension). Allows an attacker to execute code remotely.
Cross-site scripting vulnerability in Azure DevOps Server. Allows an attacker to inject malicious scripts.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS