Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2020-35730 | not reported | — | Listed | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javas... | — |
| CVE-2023-20887 | not reported | — | Listed | VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious a... | — |
| CVE-2023-27992 | not reported | — | Listed | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unaut... | — |
| CVE-2023-20867 | not reported | — | Listed | VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to f... | — |
| CVE-2023-32439 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously... | — |
| CVE-2023-32435 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing malicious... | — |
| CVE-2023-32434 | not reported | — | Listed | Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel... | — |
| CVE-2021-25372 | not reported | — | Listed | Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access. | — |
| CVE-2021-25371 | not reported | — | Listed | Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP. | — |
| CVE-2021-25395 | not reported | — | Listed | Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a wr... | — |
| CVE-2021-25394 | not reported | — | Listed | Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a wr... | — |
| CVE-2021-25489 | not reported | — | Listed | Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string... | — |
| CVE-2021-25487 | not reported | — | Listed | Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a... | — |
| CVE-2019-20500 | not reported | — | Listed | D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web... | — |
| CVE-2019-17621 | not reported | — | Listed | D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated... | — |
| CVE-2021-29256 | not reported | — | Listed | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclo... | — |
| CVE-2022-31199 | not reported | — | Listed | Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthen... | — |
| CVE-2023-36874 | not reported | — | Listed | Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2023-32049 | not reported | — | Listed | Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Se... | — |
| CVE-2023-32046 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation. | — |