Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-5419 | not reported | — | Listed | Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap cor... | — |
| CVE-2025-32433 | not reported | — | Listed | Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute... | — |
| CVE-2024-42009 | not reported | — | Listed | RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails o... | — |
| CVE-2025-24016 | not reported | — | Listed | Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers. | — |
| CVE-2025-33053 | not reported | — | Listed | Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote... | — |
| CVE-2023-33538 | not reported | — | Listed | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetw... | — |
| CVE-2023-0386 | not reported | — | Listed | Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with cap... | — |
| CVE-2024-54085 | not reported | — | Listed | AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this... | — |
| CVE-2024-0769 | not reported | — | Listed | D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulati... | — |
| CVE-2019-6693 | not reported | — | Listed | Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS con... | — |
| CVE-2025-6543 | not reported | — | Listed | Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler... | — |
| CVE-2025-48927 | not reported | — | Listed | TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Sp... | — |
| CVE-2025-48928 | not reported | — | Listed | TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a... | — |
| CVE-2025-6554 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted... | — |
| CVE-2014-3931 | not reported | — | Listed | Multi-Router Looking Glass (MRLG) contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory wr... | — |
| CVE-2016-10033 | not reported | — | Listed | PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the... | — |
| CVE-2019-5418 | not reported | — | Listed | Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `r... | — |
| CVE-2019-9621 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component. | — |
| CVE-2025-47812 | not reported | — | Listed | Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua co... | — |
| CVE-2025-25257 | not reported | — | Listed | Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or comm... | — |