Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-30952 | not reported | — | Listed | Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously c... | — |
| CVE-2021-22681 | not reported | — | Listed | Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key... | — |
| CVE-2017-7921 | not reported | — | Listed | Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the... | — |
| CVE-2026-1603 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote u... | — |
| CVE-2026-3909 | not reported | — | Listed | Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a cr... | — |
| CVE-2026-3910 | not reported | — | Listed | Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remo... | — |
| CVE-2025-47813 | not reported | — | Listed | Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID coo... | — |
| CVE-2026-20963 | not reported | — | Listed | Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a... | — |
| CVE-2026-20131 | not reported | — | Listed | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization... | — |
| CVE-2025-54068 | not reported | — | Listed | Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in sp... | — |
| CVE-2026-33017 | not reported | — | Listed | Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication. | — |
| CVE-2026-33634 | not reported | — | Listed | Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD... | — |
| CVE-2026-3055 | not reported | — | Listed | Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-b... | — |
| CVE-2026-5281 | not reported | — | Listed | Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute... | — |
| CVE-2026-3502 | not reported | — | Listed | TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery... | — |
| CVE-2026-35616 | not reported | — | Listed | Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorize... | — |
| CVE-2026-1340 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote c... | — |
| CVE-2026-21643 | not reported | — | Listed | Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or c... | — |
| CVE-2020-9715 | not reported | — | Listed | Adobe Acrobat contains a use-after-free vulnerability that allows for code execution | — |
| CVE-2023-36424 | not reported | — | Listed | Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges... | — |