Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-36025 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender Smart... | — |
| CVE-2023-36033 | not reported | — | Listed | Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-2551 | not reported | — | Listed | Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with netwo... | — |
| CVE-2023-1671 | not reported | — | Listed | Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution. | — |
| CVE-2023-36584 | not reported | — | Listed | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and avail... | — |
| CVE-2023-49103 | not reported | — | Listed | ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, in... | — |
| CVE-2023-6345 | not reported | — | Listed | Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to... | — |
| CVE-2023-42916 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when process... | — |
| CVE-2023-42917 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing malicious... | — |
| CVE-2022-22071 | not reported | — | Listed | Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process ini... | — |
| CVE-2023-33063 | not reported | — | Listed | Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to... | — |
| CVE-2023-33106 | not reported | — | Listed | Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting... | — |
| CVE-2023-33107 | not reported | — | Listed | Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtu... | — |
| CVE-2023-41265 | not reported | — | Listed | Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend... | — |
| CVE-2023-41266 | not reported | — | Listed | Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending... | — |
| CVE-2023-6448 | not reported | — | Listed | Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remot... | — |
| CVE-2023-47565 | not reported | — | Listed | QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network. | — |
| CVE-2023-49897 | not reported | — | Listed | FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network. | — |
| CVE-2023-7024 | not reported | — | Listed | Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerab... | — |
| CVE-2023-7101 | not reported | — | Listed | Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval... | — |