Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2021-27878 not reported — Listed Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol com... —
CVE-2021-27877 not reported — Listed Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE... —
CVE-2021-27876 not reported — Listed Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a da... —
CVE-2023-28206 not reported — Listed Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kerne... —
CVE-2023-28205 not reported — Listed Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously... —
CVE-2023-28252 not reported — Listed Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. —
CVE-2023-29492 not reported — Listed Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of... —
CVE-2023-20963 not reported — Listed Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK wi... —
CVE-2023-2033 not reported — Listed Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... —
CVE-2019-8526 not reported — Listed Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation. —
CVE-2017-6742 not reported — Listed The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated,... —
CVE-2023-2136 not reported — Listed Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to... —
CVE-2023-27350 not reported — Listed PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code... —
CVE-2023-28432 not reported — Listed MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosur... —
CVE-2023-21839 not reported — Listed Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to co... —
CVE-2021-45046 not reported — Listed Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Conte... —
CVE-2023-1389 not reported — Listed TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution. —
CVE-2023-29336 not reported — Listed Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. —
CVE-2016-8735 not reported — Listed Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attac... —
CVE-2016-3427 not reported — Listed Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and avai... —