CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Sensitive information disclosure occurs due to improper token validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Linux binaries have the executable stack attribute enabled. The vulnerability affects Acronis Cyber Protect 17 (Linux) before build 42587.
Acronis Cyber Protect 17 (Linux, Windows) before build 42587 contains a vulnerability due to improper token validation, leading to sensitive information disclosure and manipulation.
Acronis Cyber Protect 17 (Linux, Windows) before build 42587 contains a vulnerability due to improper token validation, leading to sensitive information disclosure and manipulation.
Sensitive information disclosure occurs due to improper token validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.
A cross-site scripting (XSS) vulnerability occurs due to improper input validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Sensitive information disclosure occurs due to insufficiently protected credentials. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Dell PowerProtect Data Domain contains a Stack-based Buffer Overflow vulnerability. A low-privileged attacker with remote access could exploit it to gain unauthorized access.
Dell PowerProtect Data Domain contains an Out-of-bounds Write vulnerability. A low-privileged attacker with remote access could exploit it to cause a denial of service.
A link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, this enables arbitrary file/folder deletion leveraged to gain NT AUTHORITY\SYSTEM privileges.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
This CVE was rejected — it was reserved in error and never associated with a vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS