CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
W Kubernetes odkryto problem bezpieczeństwa, który pozwala aktorom kontrolującym odpowiedzi na żądania MutatingWebhookConfiguration lub ValidatingWebhookConfiguration na przekierowanie żądań kube-apiserver do prywatnych sieci apiservera. Użytkownik, który ma dostęp do logów kube-apiserver przy poziomie logowania ustawionym na 10, może zobaczyć przekierowane odpowiedzi i nagłówki w logach.
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
Information disclosure vulnerability in Microsoft Accessibility Insights for Android. Could allow an attacker to access sensitive data.
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
Tampering vulnerability in Microsoft Edge (Chromium-based). Could allow modification of browser data or behavior.
Information Disclosure vulnerability in Microsoft Office Graphics Component. Could allow an attacker to read data from memory.
Information Disclosure vulnerability in Windows Storage. Could allow an attacker to read data from memory.
Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.
Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.
A vulnerability in Windows BitLocker allows a security feature bypass. An attacker could exploit this flaw to bypass protection mechanisms.
Information disclosure vulnerability in Windows Ancillary Function Driver for WinSock. Could allow access to sensitive data.
A security feature bypass vulnerability in Windows Key Storage Provider allows an attacker to bypass key protection mechanisms. This could lead to unauthorized access to cryptographic keys and protected data.
Information disclosure vulnerability in Windows SMB. It may allow an attacker to access information that should be protected.
Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.
Information disclosure vulnerability in Windows Installer. Could allow an attacker to read sensitive data.
Denial of Service vulnerability in Windows Installer. Can lead to installation or system crashes.
Spoofing vulnerability in Windows Authenticode. Could allow an attacker to impersonate trusted software.
Information Disclosure vulnerability in Azure Sphere. Could allow an attacker to read data from memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS