CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2017-10893 describes an untrusted search path vulnerability in the JPKI user's software, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The Microsoft Malware Protection Engine running on various versions of Windows and Exchange servers does not properly scan a specially crafted file, leading to remote code execution.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82736068 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730070 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730050 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or potentially other unspecified impacts by sending a DeviceIoControl request with code 0x82730030 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a system crash (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82732140 to the \.\Viragtlt device.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730054 to the \.\Viragtlt device.
Podatność w oprogramowaniu TG Soft Vir.IT eXplorer Lite w wersji 8.5.42 umożliwia lokalnym użytkownikom wywołanie błędu BSOD (Blue Screen of Death) lub potencjalnie innych skutków poprzez wysłanie żądania DeviceIoControl o kodzie 0x82730008 do urządzenia \.\Viragtlt. Jest to inna podatność niż CVE-2017-16948.
Podatność w oprogramowaniu TG Soft Vir.IT eXplorer Lite w wersji 8.5.42 umożliwia lokalnym użytkownikom eskalację uprawnień lub wywołanie odmowy usługi poprzez wysłanie żądania DeviceIoControl o kodzie 0x82730020 do urządzenia \.\Viragtlt. Jest to inna podatność niż CVE-2017-17050.
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) by sending a specially crafted DeviceIoControl request with code 0x82730074 to the \\.\Viragtlt device. This can lead to denial of service or other unspecified impacts.
A vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to gain privileges or cause a denial of service via an arbitrary write operation triggered by a DeviceIoControl request of 0x82730088 to the \\.\Viragtlt device.
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with code 0x95002574.
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows NULL pointer dereference via a DeviceIoControl request with code 0x95002570.
Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, including ssid and psk_wepkey fields.
The Linux kernel version 3.3-rc1 and later is affected by a vulnerability related to the processing of incoming L2CAP commands - ConfigRequest and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state.
In Fossil versions before 2.4, the SSH sync protocol allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname.
In Mercurial before version 4.4.1, a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script. Typical use of Mercurial prevents the construction of such repositories, but they can be created programmatically.
The Microsoft Malware Protection Engine improperly scans a specially crafted file, leading to remote code execution. This affects various versions of Windows and Exchange servers.
IBM Atlas eDiscovery Process Management version 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS