Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-28229 | not reported | — | Listed | Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to... | — |
| CVE-2023-42793 | not reported | — | Listed | JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server. | — |
| CVE-2023-42824 | not reported | — | Listed | Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation. | — |
| CVE-2023-40044 | not reported | — | Listed | Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated... | — |
| CVE-2023-22515 | not reported | — | Listed | Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Co... | — |
| CVE-2023-44487 | not reported | — | Listed | HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). | — |
| CVE-2023-36563 | not reported | — | Listed | Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure. | — |
| CVE-2023-41763 | not reported | — | Listed | Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2023-20109 | not reported | — | Listed | Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an... | — |
| CVE-2023-21608 | not reported | — | Listed | Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. | — |
| CVE-2023-20198 | not reported | — | Listed | Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated attac... | — |
| CVE-2023-4966 | not reported | — | Listed | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when con... | — |
| CVE-2023-20273 | not reported | — | Listed | Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can levera... | — |
| CVE-2023-5631 | not reported | — | Listed | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript c... | — |
| CVE-2023-46747 | not reported | — | Listed | F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed reques... | — |
| CVE-2023-46748 | not reported | — | Listed | F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through... | — |
| CVE-2023-46604 | not reported | — | Listed | Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker... | — |
| CVE-2023-22518 | not reported | — | Listed | Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when ex... | — |
| CVE-2023-29552 | not reported | — | Listed | The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to... | — |
| CVE-2023-36851 | not reported | — | Listed | Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network... | — |