Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-20818 | high | 7.8 | No | Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These... | 2026-11-03 |
| CVE-2022-1292 | high | 7.3 | No | The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operati... | 2026-11-03 |
| CVE-2021-4043 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0. | 2026-11-03 |
| CVE-2015-5477 | high | 7.5 | Listed | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa... | 2026-11-03 |
| CVE-2026-67295 | medium | 6.3 | No | FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibli... | 2026-11-03 |
| CVE-2026-70464 | high | 7.5 | No | rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon co... | 2026-11-03 |
| CVE-2026-70462 | medium | 6.5 | No | rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permane... | 2026-11-03 |
| CVE-2026-67300 | high | 7.5 | No | FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOW_STATE_ORDER... | 2026-11-03 |
| CVE-2026-67298 | high | 7.5 | No | FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_server_handle_messages() in... | 2026-11-03 |
| CVE-2026-91947 | high | 7.5 | No | FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after... | 2026-11-03 |
| CVE-2026-91964 | high | 8.8 | No | FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU... | 2026-11-03 |
| CVE-2026-84180 | medium | 5.3 | No | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Cam... | 2026-11-03 |
| CVE-2026-84181 | medium | 5.9 | No | Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19... | 2026-11-03 |
| CVE-2026-85243 | medium | 5.9 | No | Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.... | 2026-11-03 |
| CVE-2026-85245 | medium | 5.9 | No | Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 befor... | 2026-11-03 |
| CVE-2026-85246 | medium | 5.3 | No | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel:... | 2026-11-03 |
| CVE-2026-85247 | medium | 5.9 | No | Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5,... | 2026-11-03 |
| CVE-2026-85249 | medium | 6.5 | No | Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.1... | 2026-11-03 |
| CVE-2026-85250 | high | 7.5 | No | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from... | 2026-11-03 |
| CVE-2026-85251 | high | 7.5 | No | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: f... | 2026-11-03 |