Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-5631 | not reported | — | Listed | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript c... | — |
| CVE-2023-46747 | not reported | — | Listed | F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed reques... | — |
| CVE-2023-46748 | not reported | — | Listed | F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through... | — |
| CVE-2023-46604 | not reported | — | Listed | Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker... | — |
| CVE-2023-22518 | not reported | — | Listed | Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when ex... | — |
| CVE-2023-29552 | not reported | — | Listed | The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to... | — |
| CVE-2023-36851 | not reported | — | Listed | Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network... | — |
| CVE-2023-36847 | not reported | — | Listed | Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-... | — |
| CVE-2023-36846 | not reported | — | Listed | Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network... | — |
| CVE-2023-36845 | not reported | — | Listed | Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, net... | — |
| CVE-2023-36844 | not reported | — | Listed | Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based atta... | — |
| CVE-2023-47246 | not reported | — | Listed | SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution. | — |
| CVE-2023-36036 | not reported | — | Listed | Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM p... | — |
| CVE-2023-36025 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender Smart... | — |
| CVE-2023-36033 | not reported | — | Listed | Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-2551 | not reported | — | Listed | Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with netwo... | — |
| CVE-2023-1671 | not reported | — | Listed | Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution. | — |
| CVE-2023-36584 | not reported | — | Listed | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and avail... | — |
| CVE-2023-49103 | not reported | — | Listed | ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, in... | — |
| CVE-2023-6345 | not reported | — | Listed | Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to... | — |