CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Azure File Sync allows elevation of privilege. Technical details are not provided in the description.
A Spoofing vulnerability in Microsoft Azure Active Directory B2C allows an attacker to impersonate the service or users.
A vulnerability in Windows DNS allows information disclosure. An attacker could exploit this flaw to access sensitive data.
Information disclosure vulnerability in Microsoft Teams for Android. May allow access to sensitive data.
A vulnerability in the Windows kernel allows security feature bypass. Technical details are not provided in the description.
Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.
A Denial of Service vulnerability in Windows Network Address Translation (NAT) allows an attacker to cause service failure or unavailability. The attack can be performed remotely without authentication.
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could cause the NAT service to crash, potentially disrupting network connectivity.
Remote code execution vulnerability in the Windows kernel. Allows an attacker to execute code with elevated privileges.
Information disclosure vulnerability in the Windows kernel. It may allow an attacker to access data that should be protected.
A vulnerability in the Windows USB Generic Parent Driver allows remote code execution.
A vulnerability in Trusted Compute Base allows elevation of privilege. Technical details are not provided in the description.
A vulnerability in Skype for Business allows information disclosure.
Denial of Service vulnerability in Windows Hyper-V. An attacker can cause failure or unavailability of virtualization services.
A spoofing vulnerability in Azure Stack Hub allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
A path traversal vulnerability in Undertow may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.
In the Linux kernel through 6.7.4, create_empty_lvol in drivers/mtd/ubi/vtbl.c can attempt to allocate zero bytes and crash due to a missing check for ubi->leb_size.
Mattermost fails to check whether a custom emoji reaction exists and does not limit the number of custom emojis added to a post. An attacker can send a huge amount of non-existent custom emojis to crash a user's mobile app and overload the server when clients retrieve the post.
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
A vulnerability in Linux PAM before version 1.6.0 allows attackers to cause a denial of service by blocking the login process. The issue stems from the lack of the O_DIRECTORY flag in the openat call for the protect_dir function, enabling the use of mkfifo.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS