CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background, allowing attackers to steal cookies via a crafted payload in the search box.
Elevation of privilege vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit this flaw to gain elevated privileges on the system.
Information disclosure vulnerability in Microsoft Edge (Chromium-based). It could allow an attacker to access information that should not be disclosed.
A vulnerability in Microsoft Edge (Chromium-based) allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges in the browser context.
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows injection of malicious script into the application.
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
A vulnerability in Azure CycleCloud allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges in the system.
Information disclosure vulnerability in the Windows Cryptographic Primitives Library. It may allow an attacker to access data that should be protected.
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
Information disclosure vulnerability in ASP.NET Core and Visual Studio. Could allow an attacker to read sensitive data.
An information disclosure vulnerability in .NET Core and Visual Studio allows an attacker to gain access to sensitive data. The flaw could be exploited to read information that should be protected.
A memory corruption vulnerability in the Scripting Engine in Microsoft systems. Technical details are not available in the description.
A vulnerability in Azure Sphere allows a denial of service (DoS) attack. An attacker could exploit this flaw to disrupt the service.
A vulnerability in Azure Sphere allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
A Cross Site Scripting (XSS) vulnerability was found in TRENDnet TV-IP110WN cameras running firmware versions V1.2.2.64, V1.2.2.65, and V1.2.2.68. The flaw exists in the 'profile' parameter of a GET request to view.cgi.
In MISP version 2.4.147, there is a Stored XSS vulnerability in app/View/GalaxyElements/ajax/index.ctp that can be exploited when viewing galaxy cluster elements in JSON format.
In MISP version 2.4.147, there is a stored XSS vulnerability in the view_relation_tree.ctp file, allowing malicious code execution when viewing galaxy cluster relationships.
In MISP version 2.4.146, there is a Stored XSS vulnerability in app/View/GalaxyClusters/add.ctp that can be exploited when forking a galaxy cluster.
Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the class_name parameter to update_class.php.
Vulnerability in PeopleSoft Enterprise CS Campus Community product (component: Integration and Interfaces) versions 9.0 and 9.2. Allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data.