Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2010-3765 | not reported | — | Listed | Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to... | — |
| CVE-2011-3402 | not reported | — | Listed | Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers... | — |
| CVE-2013-3918 | not reported | — | Listed | Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An at... | — |
| CVE-2021-43226 | not reported | — | Listed | Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker... | — |
| CVE-2010-3962 | not reported | — | Listed | Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impact... | — |
| CVE-2025-27915 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insuffic... | — |
| CVE-2021-43798 | not reported | — | Listed | Grafana contains a path traversal vulnerability that could allow access to local files. | — |
| CVE-2016-7836 | not reported | — | Listed | SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authenticati... | — |
| CVE-2025-59230 | not reported | — | Listed | Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authori... | — |
| CVE-2025-24990 | not reported | — | Listed | Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attack... | — |
| CVE-2025-47827 | not reported | — | Listed | IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module impr... | — |
| CVE-2025-54253 | not reported | — | Listed | Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. | — |
| CVE-2025-33073 | not reported | — | Listed | Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could... | — |
| CVE-2025-2747 | not reported | — | Listed | Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to con... | — |
| CVE-2025-2746 | not reported | — | Listed | Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to con... | — |
| CVE-2022-48503 | not reported | — | Listed | Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead... | — |
| CVE-2025-59287 | not reported | — | Listed | Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execut... | — |
| CVE-2025-54236 | not reported | — | Listed | Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer... | — |
| CVE-2025-6205 | not reported | — | Listed | Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the... | — |
| CVE-2025-6204 | not reported | — | Listed | Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code. | — |