Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-27350 | not reported | — | Listed | PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code... | — |
| CVE-2023-28432 | not reported | — | Listed | MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosur... | — |
| CVE-2023-21839 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to co... | — |
| CVE-2021-45046 | not reported | — | Listed | Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Conte... | — |
| CVE-2023-1389 | not reported | — | Listed | TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution. | — |
| CVE-2023-29336 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. | — |
| CVE-2016-8735 | not reported | — | Listed | Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attac... | — |
| CVE-2016-3427 | not reported | — | Listed | Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and avai... | — |
| CVE-2015-5317 | not reported | — | Listed | Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise... | — |
| CVE-2010-3904 | not reported | — | Listed | Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows... | — |
| CVE-2014-0196 | not reported | — | Listed | Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (D... | — |
| CVE-2021-3560 | not reported | — | Listed | Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for... | — |
| CVE-2023-25717 | not reported | — | Listed | Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services componen... | — |
| CVE-2023-21492 | not reported | — | Listed | Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows... | — |
| CVE-2016-6415 | not reported | — | Listed | Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IK... | — |
| CVE-2004-1464 | not reported | — | Listed | Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and i... | — |
| CVE-2023-32373 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processi... | — |
| CVE-2023-28204 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive informati... | — |
| CVE-2023-32409 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break ou... | — |
| CVE-2023-2868 | not reported | — | Listed | Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading t... | — |