Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-36062 | low | 3.8 | No | Grafana is an open-source platform for monitoring and observability. In versions prior to 8.5.13, 9.0.9, and 9.1.6, Grafana is subject to Im... | 2026-11-03 |
| CVE-2022-34718 | critical | 9.8 | No | Windows TCP/IP Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2022-35768 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-34707 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-23498 | high | 8.8 | No | Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, i... | 2026-11-03 |
| CVE-2022-23552 | medium | 5.4 | No | Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and... | 2026-11-03 |
| CVE-2022-2068 | high | 7.3 | No | In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not pr... | 2026-11-03 |
| CVE-2022-20818 | high | 7.8 | No | Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These... | 2026-11-03 |
| CVE-2022-1292 | high | 7.3 | No | The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operati... | 2026-11-03 |
| CVE-2021-4043 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0. | 2026-11-03 |
| CVE-2015-5477 | high | 7.5 | Listed | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa... | 2026-11-03 |
| CVE-2026-67295 | medium | 6.3 | No | FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibli... | 2026-11-03 |
| CVE-2026-70464 | high | 7.5 | No | rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon co... | 2026-11-03 |
| CVE-2026-70462 | medium | 6.5 | No | rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permane... | 2026-11-03 |
| CVE-2026-67300 | high | 7.5 | No | FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOW_STATE_ORDER... | 2026-11-03 |
| CVE-2026-67298 | high | 7.5 | No | FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_server_handle_messages() in... | 2026-11-03 |
| CVE-2026-91947 | high | 7.5 | No | FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after... | 2026-11-03 |
| CVE-2026-91964 | high | 8.8 | No | FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU... | 2026-11-03 |
| CVE-2026-84180 | medium | 5.3 | No | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Cam... | 2026-11-03 |
| CVE-2026-84181 | medium | 5.9 | No | Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19... | 2026-11-03 |