Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-32049 | not reported | — | Listed | Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Se... | — |
| CVE-2023-32046 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2023-37450 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously cr... | — |
| CVE-2022-29303 | not reported | — | Listed | SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the... | — |
| CVE-2023-36884 | not reported | — | Listed | Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a s... | — |
| CVE-2023-3519 | not reported | — | Listed | Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution. | — |
| CVE-2023-38205 | not reported | — | Listed | Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. | — |
| CVE-2023-29298 | not reported | — | Listed | Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. | — |
| CVE-2023-35078 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauth... | — |
| CVE-2023-38606 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state. | — |
| CVE-2023-37580 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data. | — |
| CVE-2023-35081 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicio... | — |
| CVE-2017-18368 | not reported | — | Listed | Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an u... | — |
| CVE-2023-38180 | not reported | — | Listed | Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS). | — |
| CVE-2023-24489 | not reported | — | Listed | Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely comp... | — |
| CVE-2023-26359 | not reported | — | Listed | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the curren... | — |
| CVE-2023-27532 | not reported | — | Listed | Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unau... | — |
| CVE-2023-38035 | not reported | — | Listed | Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass aut... | — |
| CVE-2023-32315 | not reported | — | Listed | Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the O... | — |
| CVE-2023-38831 | not reported | — | Listed | RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file withi... | — |