Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-0543 | not reported | — | Listed | Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution. | — |
| CVE-2022-1096 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2018-10561 | not reported | — | Listed | Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to... | — |
| CVE-2018-10562 | not reported | — | Listed | Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to... | — |
| CVE-2021-21551 | not reported | — | Listed | Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS)... | — |
| CVE-2021-28799 | not reported | — | Listed | QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device. | — |
| CVE-2021-34484 | not reported | — | Listed | Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-1040 | not reported | — | Listed | An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution. | — |
| CVE-2022-26871 | not reported | — | Listed | An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution. | — |
| CVE-2021-45382 | not reported | — | Listed | A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file. | — |
| CVE-2022-22674 | not reported | — | Listed | macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory. | — |
| CVE-2022-22675 | not reported | — | Listed | macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privilege... | — |
| CVE-2022-22965 | not reported | — | Listed | Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. | — |
| CVE-2017-0148 | not reported | — | Listed | The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets. | — |
| CVE-2021-31166 | not reported | — | Listed | Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution. | — |
| CVE-2021-3156 | not reported | — | Listed | Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation. | — |
| CVE-2017-11317 | not reported | — | Listed | Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code. | — |
| CVE-2020-2509 | not reported | — | Listed | QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution. | — |
| CVE-2021-22600 | not reported | — | Listed | Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user co... | — |
| CVE-2021-27852 | not reported | — | Listed | Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute a... | — |