Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2015-7755 not reported — Listed Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device. —
CVE-2017-1000353 not reported — Listed Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java Signed... —
CVE-2014-6278 not reported — Listed GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environmen... —
CVE-2010-3765 not reported — Listed Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to... —
CVE-2011-3402 not reported — Listed Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers... —
CVE-2013-3918 not reported — Listed Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An at... —
CVE-2021-43226 not reported — Listed Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker... —
CVE-2010-3962 not reported — Listed Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impact... —
CVE-2025-27915 not reported — Listed Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insuffic... —
CVE-2021-43798 not reported — Listed Grafana contains a path traversal vulnerability that could allow access to local files. —
CVE-2016-7836 not reported — Listed SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authenticati... —
CVE-2025-59230 not reported — Listed Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authori... —
CVE-2025-24990 not reported — Listed Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attack... —
CVE-2025-47827 not reported — Listed IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module impr... —
CVE-2025-54253 not reported — Listed Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. —
CVE-2025-33073 not reported — Listed Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could... —
CVE-2025-2747 not reported — Listed Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to con... —
CVE-2025-2746 not reported — Listed Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to con... —
CVE-2022-48503 not reported — Listed Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead... —
CVE-2025-59287 not reported — Listed Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execut... —