Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-8069 | not reported | — | Listed | Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege... | — |
| CVE-2024-8068 | not reported | — | Listed | Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService... | — |
| CVE-2025-7775 | not reported | — | Listed | Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial... | — |
| CVE-2020-24363 | not reported | — | Listed | TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated... | — |
| CVE-2025-48543 | not reported | — | Listed | Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation. | — |
| CVE-2025-5086 | not reported | — | Listed | Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution. | — |
| CVE-2025-10585 | not reported | — | Listed | Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. | — |
| CVE-2021-21311 | not reported | — | Listed | Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive... | — |
| CVE-2025-59689 | not reported | — | Listed | Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail att... | — |
| CVE-2025-32463 | not reported | — | Listed | Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to le... | — |
| CVE-2025-4008 | not reported | — | Listed | Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary comma... | — |
| CVE-2015-7755 | not reported | — | Listed | Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device. | — |
| CVE-2017-1000353 | not reported | — | Listed | Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java Signed... | — |
| CVE-2014-6278 | not reported | — | Listed | GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environmen... | — |
| CVE-2010-3765 | not reported | — | Listed | Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to... | — |
| CVE-2011-3402 | not reported | — | Listed | Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers... | — |
| CVE-2013-3918 | not reported | — | Listed | Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An at... | — |
| CVE-2021-43226 | not reported | — | Listed | Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker... | — |
| CVE-2010-3962 | not reported | — | Listed | Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impact... | — |
| CVE-2025-27915 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insuffic... | — |