CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Remote Procedure Call (RPC) can lead to Denial of Service (DoS). An attacker can exploit this flaw to block access to the service.
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in the MSHTML platform security feature in Windows allows for a security bypass. An attacker can exploit this flaw to perform unauthorized actions on the system.
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure.
A vulnerability in Windows allows for the disclosure of cryptographic information. This may lead to unauthorized access to sensitive data.
A vulnerability in Remote Procedure Call Runtime allows for remote procedure calls that can lead to denial of service.
A vulnerability in Remote Procedure Call Runtime allows for a remote Denial of Service (DoS) attack. An attacker can exploit this flaw to disrupt service availability.
A vulnerability in Remote Procedure Call Runtime allows for a remote Denial of Service (DoS) attack. An attacker can exploit this flaw to disrupt service availability.
A vulnerability in Remote Procedure Call (RPC) can lead to a denial of service (DoS). An attacker can exploit this flaw to block access to the service.
A vulnerability in Remote Procedure Call Runtime allows for remote procedure calls that can lead to denial of service.
A vulnerability in Remote Procedure Call Runtime allows for remote procedure calls that can lead to denial of service.
A vulnerability in Microsoft SharePoint Server allows for security feature bypass, potentially leading to unauthorized access to data.
A vulnerability in Remote Procedure Call (RPC) can lead to a denial of service (DoS). An attacker can exploit this flaw to block access to the service.
A vulnerability in Microsoft Excel allows for information disclosure, potentially leading to unauthorized access to user data.
A vulnerability in Microsoft Defender allows for elevation of privilege, potentially leading to unauthorized access to the system.
A vulnerability in Microsoft Outlook allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
A vulnerability in Microsoft Outlook allows for spoofing, which may lead to unauthorized access to user information. An attacker can exploit this flaw to impersonate others in email correspondence.
A critical vulnerability has been found in Nesote Inout Blockchain FiatExchanger 3.0, affecting an unknown part of the file /index.php/coins/update_marketboxslider in the POST Parameter Handler. Manipulation of the argument marketcurrency leads to SQL injection.
A critical vulnerability was found in the Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System. The issue affects some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx in the Duty Module, where manipulation of the argument Filedata leads to unrestricted file uploads.