Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-35082 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to a... | — |
| CVE-2023-34048 | not reported | — | Listed | VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to... | — |
| CVE-2024-23222 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing malici... | — |
| CVE-2023-22527 | not reported | — | Listed | Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code ex... | — |
| CVE-2024-21893 | not reported | — | Listed | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request... | — |
| CVE-2022-48618 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an atta... | — |
| CVE-2023-4762 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulne... | — |
| CVE-2023-43770 | not reported | — | Listed | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link... | — |
| CVE-2024-21351 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experi... | — |
| CVE-2024-21412 | not reported | — | Listed | Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. | — |
| CVE-2024-21410 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-3259 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker coul... | — |
| CVE-2024-1709 | not reported | — | Listed | ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management inte... | — |
| CVE-2023-29360 | not reported | — | Listed | Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local a... | — |
| CVE-2024-21338 | not reported | — | Listed | Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control... | — |
| CVE-2021-36380 | not reported | — | Listed | Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device... | — |
| CVE-2023-21237 | not reported | — | Listed | Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide... | — |
| CVE-2024-23296 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel re... | — |
| CVE-2024-23225 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrar... | — |
| CVE-2024-27198 | not reported | — | Listed | JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. | — |