CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The rsync daemon in F5 BIG-IP in versions before 11.6.0 and other listed versions, when configured in failover mode, does not require authentication. This allows remote attackers to read or write arbitrary files via a cmi request to the ConfigSync IP address.
CVE-2014-2022 is an SQL injection vulnerability in breadcrumbs_create.php in vBulletin versions 4.2.2, 4.2.1, 4.2.0 PL2 and earlier. It allows remote authenticated users to execute arbitrary SQL commands via the conceptid argument in an xmlrpc API request.
Podatność w win32k.sys w sterownikach trybu jądra systemu Microsoft Windows umożliwia zdalnym atakującym wykonanie dowolnego kodu poprzez spreparowaną czcionkę TrueType. Wykorzystanie tej podatności miało miejsce w październiku 2014 roku.
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 6 through 8 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability'.
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 6 through 10 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer w wersjach 7-11 umożliwia zdalnym atakującym uzyskanie uprawnień poprzez specjalnie przygotowaną stronę internetową, co jest określane jako 'Podatność na podniesienie uprawnień w Internet Explorer'.
Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 improperly parse internationalized resource identifiers, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted request to a .NET web application.
A vulnerability in Microsoft Office and Word allows remote attackers to execute arbitrary code via crafted properties in a Word document. This affects Office 2007, 2010, and Office for Mac 2011.
The fastfat.sys driver in kernel mode for Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 has a memory allocation issue. This allows physically proximate attackers to execute arbitrary code or cause a denial of service by connecting a crafted USB device.
Podatność w systemach Microsoft Windows umożliwia zdalnym atakującym wykonanie dowolnego kodu poprzez spreparowany obiekt OLE w dokumencie Office. Wykorzystano ją w atakach typu 'Sandworm' od czerwca do października 2014 roku.
Podatność w win32k.sys w sterownikach trybu jądra systemu Microsoft Windows umożliwia lokalnym użytkownikom uzyskanie podwyższonych uprawnień poprzez specjalnie przygotowaną aplikację. Wykorzystanie tej podatności miało miejsce w październiku 2014 roku.