Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-0167 | not reported | — | Listed | There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software,... | — |
| CVE-2018-0172 | not reported | — | Listed | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-... | — |
| CVE-2018-0173 | not reported | — | Listed | A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Versio... | — |
| CVE-2018-0174 | not reported | — | Listed | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-... | — |
| CVE-2018-0175 | not reported | — | Listed | Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IO... | — |
| CVE-2018-0179 | not reported | — | Listed | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri... | — |
| CVE-2018-0180 | not reported | — | Listed | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri... | — |
| CVE-2018-8298 | not reported | — | Listed | The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution. | — |
| CVE-2018-8581 | not reported | — | Listed | A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could at... | — |
| CVE-2019-1297 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. | — |
| CVE-2019-1652 | not reported | — | Listed | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an au... | — |
| CVE-2019-16928 | not reported | — | Listed | Exim contains an out-of-bounds write vulnerability which can allow for remote code execution. | — |
| CVE-2020-11899 | not reported | — | Listed | The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability. | — |
| CVE-2020-1938 | not reported | — | Listed | Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such co... | — |
| CVE-2021-41379 | not reported | — | Listed | Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-20699 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20700 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20701 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20703 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20708 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |