CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.05)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so.
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so.
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so.
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c.
Pimcore Admin Classic Bundle, based on the ExtJS framework, has a vulnerability that allows an administrator who has not set up two-factor authentication to execute arbitrary scripts/HTML content. The attack does not require any privileges.
A critical vulnerability has been identified in the Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System. The issue affects unknown processing of the file /Duty/AjaxHandle/UpLoadFloodPlanFile.ashx, leading to unrestricted file uploads.
A critical vulnerability was found in the Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System, allowing unrestricted file uploads. The issue affects unknown code in the file /Duty/AjaxHandle/Write/UploadFile.ashx, where manipulation of the argument Filedata enables remote attacks.
The vulnerability in VP9 video extensions allows for information disclosure.
A vulnerability in Azure Active Directory allows for a security feature bypass, potentially leading to unauthorized access to resources.
A vulnerability in Azure Service Fabric on Windows allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
CVE-2023-35373 is a spoofing vulnerability in Mono Authenticode validation that may allow attackers to introduce false digital signatures.
A vulnerability in Windows Active Directory Certificate Services (AD CS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in Active Directory Federation Service allows for security feature bypass, potentially leading to unauthorized access to resources. An attacker could exploit this flaw to gain access to systems that should be protected.
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to take control of the system.
A vulnerability in Microsoft DirectMusic allows for information disclosure, potentially leading to unauthorized access to user data.
A vulnerability in the MSHTML platform security feature in Windows allows for a security bypass. An attacker can exploit this flaw to perform unauthorized actions on the system.
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
A vulnerability in Windows Local Security Authority (LSA) allows attackers to trigger a denial of service (DoS) by sending specially crafted requests. This can lead to the unavailability of security services in the system.