Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-3502 | not reported | — | Listed | TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery... | — |
| CVE-2026-35616 | not reported | — | Listed | Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorize... | — |
| CVE-2026-1340 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote c... | — |
| CVE-2026-21643 | not reported | — | Listed | Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or c... | — |
| CVE-2020-9715 | not reported | — | Listed | Adobe Acrobat contains a use-after-free vulnerability that allows for code execution | — |
| CVE-2023-36424 | not reported | — | Listed | Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges... | — |
| CVE-2023-21529 | not reported | — | Listed | Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code executio... | — |
| CVE-2012-1854 | not reported | — | Listed | Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. | — |
| CVE-2009-0238 | not reported | — | Listed | Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected s... | — |
| CVE-2024-27199 | not reported | — | Listed | JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed. | — |
| CVE-2025-32975 | not reported | — | Listed | Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate le... | — |
| CVE-2026-20128 | not reported | — | Listed | Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacke... | — |
| CVE-2025-48700 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaS... | — |
| CVE-2025-2749 | not reported | — | Listed | Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary d... | — |
| CVE-2026-20133 | not reported | — | Listed | Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote a... | — |
| CVE-2026-20122 | not reported | — | Listed | Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface... | — |
| CVE-2026-33825 | not reported | — | Listed | Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate... | — |
| CVE-2026-39987 | not reported | — | Listed | Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute a... | — |
| CVE-2024-57726 | not reported | — | Listed | SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive perm... | — |
| CVE-2024-57728 | not reported | — | Listed | SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploadin... | — |