CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Common Internet File System (CIFS).
SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter.
Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php or the (2) Username or (3) Password.
The rsync daemon in F5 BIG-IP in versions before 11.6.0 and other listed versions, when configured in failover mode, does not require authentication. This allows remote attackers to read or write arbitrary files via a cmi request to the ConfigSync IP address.
CVE-2014-2022 is an SQL injection vulnerability in breadcrumbs_create.php in vBulletin versions 4.2.2, 4.2.1, 4.2.0 PL2 and earlier. It allows remote authenticated users to execute arbitrary SQL commands via the conceptid argument in an xmlrpc API request.
Podatność w win32k.sys w sterownikach trybu jądra systemu Microsoft Windows umożliwia zdalnym atakującym wykonanie dowolnego kodu poprzez spreparowaną czcionkę TrueType. Wykorzystanie tej podatności miało miejsce w październiku 2014 roku.
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 6 through 8 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability'.
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 6 through 10 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer w wersjach 7-11 umożliwia zdalnym atakującym uzyskanie uprawnień poprzez specjalnie przygotowaną stronę internetową, co jest określane jako 'Podatność na podniesienie uprawnień w Internet Explorer'.
Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 improperly parse internationalized resource identifiers, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted request to a .NET web application.
A vulnerability in Microsoft Office and Word allows remote attackers to execute arbitrary code via crafted properties in a Word document. This affects Office 2007, 2010, and Office for Mac 2011.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS