Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-52163 | not reported | — | Listed | Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi. | — |
| CVE-2025-14847 | not reported | — | Listed | MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulne... | — |
| CVE-2025-37164 | not reported | — | Listed | Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote... | — |
| CVE-2009-0556 | not reported | — | Listed | Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint... | — |
| CVE-2026-20805 | not reported | — | Listed | Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose in... | — |
| CVE-2026-20045 | not reported | — | Listed | Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco U... | — |
| CVE-2025-54313 | not reported | — | Listed | Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js fil... | — |
| CVE-2025-31125 | not reported | — | Listed | Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import.... | — |
| CVE-2025-34026 | not reported | — | Listed | Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, a... | — |
| CVE-2025-68645 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft r... | — |
| CVE-2024-37079 | not reported | — | Listed | Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow... | — |
| CVE-2026-21509 | not reported | — | Listed | Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft... | — |
| CVE-2026-23760 | not reported | — | Listed | SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulnerability in the password reset API. The f... | — |
| CVE-2018-14634 | not reported | — | Listed | Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user wit... | — |
| CVE-2026-24858 | not reported | — | Listed | Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could... | — |
| CVE-2026-1281 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote c... | — |
| CVE-2025-40551 | not reported | — | Listed | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would al... | — |
| CVE-2019-19006 | not reported | — | Listed | Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authenticati... | — |
| CVE-2025-64328 | not reported | — | Listed | Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection... | — |
| CVE-2021-39935 | not reported | — | Listed | GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users t... | — |