Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2015-5317 not reported — Listed Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise... —
CVE-2010-3904 not reported — Listed Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows... —
CVE-2014-0196 not reported — Listed Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (D... —
CVE-2021-3560 not reported — Listed Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for... —
CVE-2023-25717 not reported — Listed Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services componen... —
CVE-2023-21492 not reported — Listed Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows... —
CVE-2016-6415 not reported — Listed Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IK... —
CVE-2004-1464 not reported — Listed Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and i... —
CVE-2023-32373 not reported — Listed Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processi... —
CVE-2023-28204 not reported — Listed Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive informati... —
CVE-2023-32409 not reported — Listed Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break ou... —
CVE-2023-2868 not reported — Listed Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading t... —
CVE-2023-28771 not reported — Listed Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker t... —
CVE-2023-34362 not reported — Listed Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to... —
CVE-2023-33010 not reported — Listed Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processin... —
CVE-2023-33009 not reported — Listed Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification... —
CVE-2023-27997 not reported — Listed Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attack... —
CVE-2016-0165 not reported — Listed Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. —
CVE-2016-9079 not reported — Listed Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser use... —
CVE-2021-44026 not reported — Listed Roundcube Webmail is vulnerable to SQL injection via search or search_params. —