Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2016-3298 | not reported | — | Listed | An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker w... | — |
| CVE-2016-6367 | not reported | — | Listed | A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a de... | — |
| CVE-2016-6366 | not reported | — | Listed | A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause... | — |
| CVE-2016-4657 | not reported | — | Listed | Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS)... | — |
| CVE-2016-4656 | not reported | — | Listed | A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service... | — |
| CVE-2016-4655 | not reported | — | Listed | The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application. | — |
| CVE-2016-3351 | not reported | — | Listed | An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The... | — |
| CVE-2016-0162 | not reported | — | Listed | An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an... | — |
| CVE-2017-18362 | not reported | — | Listed | ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the K... | — |
| CVE-2017-8543 | not reported | — | Listed | Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory. | — |
| CVE-2017-8291 | not reported | — | Listed | Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile. | — |
| CVE-2017-0210 | not reported | — | Listed | A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an att... | — |
| CVE-2017-0149 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-ser... | — |
| CVE-2017-0005 | not reported | — | Listed | The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application. | — |
| CVE-2017-0022 | not reported | — | Listed | Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web sit... | — |
| CVE-2017-0147 | not reported | — | Listed | The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet. | — |
| CVE-2018-19943 | not reported | — | Listed | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code. | — |
| CVE-2018-8611 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. | — |
| CVE-2010-0840 | not reported | — | Listed | Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, inte... | — |
| CVE-2013-0074 | not reported | — | Listed | Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a... | — |