Quick links
Press Enter to search, Esc to close
Threat Library
Software flaws that attackers have used in real attacks: who is affected and what to do about them.
Vulnerability 2026
CVE-2026-1731
CVE-2026-1731 is a critical flaw in BeyondTrust Remote Support (RS) and some older versions of Privileged Remote Access (PRA), tools used to reach and manage systems remotely.
Open
Vulnerability 2026
CVE-2026-50751
CVE-2026-50751 is a flaw in Check Point Security Gateway remote access VPN that lets an outsider open a VPN session without a valid password.
Open
Vulnerability 2023
CVE-2023-20198
CVE-2023-20198 is a flaw in the web management page of Cisco IOS XE, the software that runs many Cisco routers and switches.
Open
Vulnerability 2026
CVE-2026-20127
CVE-2026-20127 is a flaw in the way Cisco Catalyst SD-WAN systems check the identity of other devices that connect to them.
Open
Vulnerability 2023
CVE-2023-3519
CVE-2023-3519 is a flaw in NetScaler ADC and NetScaler Gateway, formerly Citrix ADC and Gateway.
Open
Vulnerability 2023
CVE-2023-4966
CVE-2023-4966, nicknamed Citrix Bleed, is a flaw in NetScaler ADC and NetScaler Gateway, the Citrix products that give staff remote access.
Open
Vulnerability 2025
CVE-2025-5777
CVE-2025-5777 is a flaw in NetScaler ADC and NetScaler Gateway where weak input checking lets the device read and return memory it should not.
Open
Vulnerability 2024
CVE-2024-50623
CVE-2024-50623 is a flaw in three Cleo managed file transfer products: Harmony, VLTrader and LexiCom.
Open
Vulnerability 2023
CVE-2023-22515
CVE-2023-22515 is a broken access control flaw in Atlassian Confluence Data Center and Server.
Open
Vulnerability 2025
CVE-2025-31161
CVE-2025-31161 is a flaw in CrushFTP, a file transfer server, that lets an outsider sign in as another user without a password.
Open
Vulnerability 2024
CVE-2024-55591
CVE-2024-55591 is an authentication bypass flaw in FortiOS and FortiProxy.
Open
Vulnerability 2024
CVE-2024-21762
CVE-2024-21762 is an out-of-bounds write flaw in the SSL VPN service of FortiOS and in FortiProxy.
Open
Vulnerability 2022
CVE-2022-42475
CVE-2022-42475 is a heap-based buffer overflow in the FortiOS SSL-VPN service.
Open
Vulnerability 2025
CVE-2025-10035
CVE-2025-10035 is a flaw in the License Servlet of Fortra GoAnywhere MFT, a managed file transfer product.
Open
Vulnerability 2023
CVE-2023-0669
CVE-2023-0669 is a flaw in GoAnywhere MFT, a managed file transfer product from Fortra.
Open
Vulnerability 2023
CVE-2023-46805
CVE-2023-46805 is an authentication bypass in the web component of Ivanti Connect Secure and Ivanti Policy Secure.
Open
Vulnerability 2024
CVE-2024-21887
CVE-2024-21887 is a command injection flaw in the web components of Ivanti Connect Secure and Ivanti Policy Secure.
Open
Vulnerability 2025
CVE-2025-22457
CVE-2025-22457 is a stack-based buffer overflow in Ivanti Connect Secure, Policy Secure and ZTA Gateways.
Open
Vulnerability 2025
CVE-2025-0282
CVE-2025-0282 is a stack-based buffer overflow in Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways.
Open
Vulnerability 2025
CVE-2025-3248
CVE-2025-3248 is a flaw in Langflow, an open-source tool for building AI workflows.
Open
Vulnerability 2021
CVE-2021-44228
Log4Shell (CVE-2021-44228) is a remote code execution flaw in Log4j 2, a widely used Java logging library from the Apache Software Foundation.
Open
Vulnerability 2023
CVE-2023-34362
CVE-2023-34362 is the MOVEit Transfer SQL injection flaw, in Progress MOVEit Transfer, software that companies use to exchange files.
Open
Vulnerability 2026
CVE-2026-3055
CVE-2026-3055 is a flaw in NetScaler ADC and NetScaler Gateway where weak input checking lets the device read and return memory it should not.
Open
Vulnerability 2026
CVE-2026-48027
CVE-2026-48027 is not a coding bug in Nx Console.
Open
Vulnerability 2025
CVE-2025-61882
CVE-2025-61882 is a flaw in the BI Publisher Integration part of Oracle Concurrent Processing, which is a component of Oracle E-Business Suite (EBS), a business software suite for finance…
Open
Vulnerability 2026
CVE-2026-0257
CVE-2026-0257 is a flaw in the GlobalProtect VPN portal and gateway of Palo Alto Networks PAN-OS firewalls.
Open
Vulnerability 2024
CVE-2024-3400
CVE-2024-3400 is a flaw in the GlobalProtect feature of Palo Alto Networks PAN-OS firewalls.
Open
Vulnerability 2023
CVE-2023-27350
CVE-2023-27350 is a flaw in PaperCut NG and PaperCut MF, print management software.
Open
Vulnerability 2021
CVE-2021-26855
CVE-2021-26855 is a flaw in on-premises Microsoft Exchange Server, the first link in the attack chain called ProxyLogon.
Open
Vulnerability 2025
CVE-2025-55182
CVE-2025-55182 is a flaw in React Server Components.
Open
Vulnerability 2025
CVE-2025-31324
CVE-2025-31324 is a flaw in the Visual Composer part of SAP NetWeaver.
Open
Vulnerability 2024
CVE-2024-1709
CVE-2024-1709 is a flaw in ConnectWise ScreenConnect, a tool IT teams use to control computers remotely.
Open
Vulnerability 2025
CVE-2025-53770
CVE-2025-53770 is a flaw in on-premises Microsoft SharePoint Server that lets an unauthorized attacker run code over a network.
Open
Vulnerability 2024
CVE-2024-57727
CVE-2024-57727 is a path traversal flaw in SimpleHelp, remote support software that IT teams and service providers use to manage computers.
Open
Vulnerability 2026
CVE-2026-24423
CVE-2026-24423 is a flaw in SmarterTools SmarterMail, a mail server.
Open
Vulnerability 2024
CVE-2024-40766
CVE-2024-40766 is an access control flaw in SonicOS, the software on SonicWall firewalls.
Open
Vulnerability 2024
CVE-2024-53704
CVE-2024-53704 is an authentication bypass in the SSLVPN service of SonicWall SonicOS, the operating system of SonicWall firewalls.
Open
Vulnerability 2026
CVE-2026-45321
CVE-2026-45321 is not a flaw in TanStack's router code.
Open
Vulnerability 2026
CVE-2026-63077
CVE-2026-63077 is a flaw in JetBrains TeamCity On-Premises, a server that builds and ships software (a CI/CD tool).
Open
Vulnerability 2024
CVE-2024-27198
CVE-2024-27198 is a flaw in JetBrains TeamCity On-Premises, a tool software teams use to build and ship code.
Open
Vulnerability 2026
CVE-2026-33634
CVE-2026-33634 is not a coding bug in Trivy.
Open
Vulnerability 2025
CVE-2025-22225
CVE-2025-22225 is a flaw in VMware ESXi, the hypervisor that runs virtual machines on a server.
Open
Vulnerability 2026
CVE-2026-59310
CVE-2026-59310 is a directory traversal flaw in the Syslog server of VMware vCenter, the console used to manage virtualised servers.
Open
Vulnerability 2025
CVE-2025-14733
CVE-2025-14733 is an out-of-bounds write in the iked process of WatchGuard Fireware OS, the software of Firebox firewalls.
Open
Nothing matches. Try another word or filter.
Counts as of 17 October 2026
Brandefense
Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.