CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Adobe Font Driver in Windows allows remote attackers to execute arbitrary code via a crafted website or file. This is a remote code execution vulnerability affecting multiple versions of Windows.
A vulnerability in Microsoft Word and related applications allows remote attackers to execute arbitrary code or cause a denial of service via a crafted RTF document. This affects multiple versions of Word and Word Automation Services on SharePoint.
A use-after-free vulnerability in various versions of Microsoft Office and SharePoint allows remote attackers to execute arbitrary code via a crafted Office document.
Windows Text Services (WTS) in various versions of Windows allows remote attackers to execute arbitrary code via a crafted web site or file.
The RDP implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to cause a denial of service by establishing many RDP sessions that do not properly free allocated memory.
The win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 has a vulnerability that improperly validates the token of a calling thread. This allows local users to gain privileges via a crafted application.
The kernel in Windows Server 2003 SP2, Vista SP2, Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
The Windows Registry Virtualization feature in the kernel does not properly restrict changes to virtual stores, allowing local users to gain privileges via a crafted application.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
The vulnerability in vbscript.dll in Microsoft VBScript 5.6 through 5.8, used with Internet Explorer 8 through 11, allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in disporders detail, subadminmgt edit actions, or the cid parameter in an editcurrency action.
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, allowing remote authenticated users to execute arbitrary SQL commands.
Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php.
Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the (1) termid or (2) nyelv_id parameter to index.php.
OLE Point of Sale (OPOS) drivers before version 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via unspecified vectors.
OLE Point of Sale (OPOS) drivers before version 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vulnerabilities in OPOSScanner.ocx for various types of barcode scanners.
OLE Point of Sale (OPOS) drivers before version 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vulnerabilities involving OPOSCashDrawer.ocx for various types of printers and cash drawers.
OLE Point of Sale (OPOS) drivers before version 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vulnerabilities involving OPOSPOSPrinter.ocx for various types of receipt printers.
OLE Point of Sale (OPOS) drivers before version 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via OPOSCheckScanner.ocx for various types of receipt printers.
OLE Point of Sale (OPOS) drivers before version 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vulnerabilities involving OPOSMSR.ocx for various magnetic stripe readers and POS keyboards.