Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2023-33010 not reported — Listed Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processin... —
CVE-2023-33009 not reported — Listed Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification... —
CVE-2023-27997 not reported — Listed Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attack... —
CVE-2016-0165 not reported — Listed Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. —
CVE-2016-9079 not reported — Listed Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser use... —
CVE-2021-44026 not reported — Listed Roundcube Webmail is vulnerable to SQL injection via search or search_params. —
CVE-2020-12641 not reported — Listed Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a config... —
CVE-2020-35730 not reported — Listed Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javas... —
CVE-2023-20887 not reported — Listed VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious a... —
CVE-2023-27992 not reported — Listed Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unaut... —
CVE-2023-20867 not reported — Listed VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to f... —
CVE-2023-32439 not reported — Listed Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously... —
CVE-2023-32435 not reported — Listed Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing malicious... —
CVE-2023-32434 not reported — Listed Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel... —
CVE-2021-25372 not reported — Listed Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access. —
CVE-2021-25371 not reported — Listed Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP. —
CVE-2021-25395 not reported — Listed Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a wr... —
CVE-2021-25394 not reported — Listed Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a wr... —
CVE-2021-25489 not reported — Listed Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string... —
CVE-2021-25487 not reported — Listed Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a... —