Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-38203 | not reported | — | Listed | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. | — |
| CVE-2023-29300 | not reported | — | Listed | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. | — |
| CVE-2023-27524 | not reported | — | Listed | Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access u... | — |
| CVE-2023-41990 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file. | — |
| CVE-2016-20017 | not reported | — | Listed | D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi c... | — |
| CVE-2023-23752 | not reported | — | Listed | Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints. | — |
| CVE-2024-21887 | not reported | — | Listed | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in th... | — |
| CVE-2023-29357 | not reported | — | Listed | Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed... | — |
| CVE-2018-15133 | not reported | — | Listed | Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may... | — |
| CVE-2023-6548 | not reported | — | Listed | Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the... | — |
| CVE-2023-6549 | not reported | — | Listed | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a... | — |
| CVE-2024-0519 | not reported | — | Listed | Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap co... | — |
| CVE-2023-35082 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to a... | — |
| CVE-2023-34048 | not reported | — | Listed | VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to... | — |
| CVE-2024-23222 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing malici... | — |
| CVE-2023-22527 | not reported | — | Listed | Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code ex... | — |
| CVE-2024-21893 | not reported | — | Listed | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request... | — |
| CVE-2022-48618 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an atta... | — |
| CVE-2023-4762 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulne... | — |
| CVE-2023-43770 | not reported | — | Listed | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link... | — |