Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2012-0754 not reported — Listed Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). —
CVE-2012-0767 not reported — Listed Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. —
CVE-2012-1889 not reported — Listed Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution. —
CVE-2012-4969 not reported — Listed Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site. —
CVE-2012-5054 not reported — Listed Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. —
CVE-2013-1331 not reported — Listed Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office doc... —
CVE-2016-1646 not reported — Listed Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibl... —
CVE-2016-5198 not reported — Listed Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operatio... —
CVE-2017-5030 not reported — Listed Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page.... —
CVE-2017-5070 not reported — Listed Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a craft... —
CVE-2017-6862 not reported — Listed Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution. —
CVE-2018-17463 not reported — Listed Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted... —
CVE-2018-17480 not reported — Listed Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a cr... —
CVE-2018-4990 not reported — Listed Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. —
CVE-2018-6065 not reported — Listed Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption vi... —
CVE-2019-15271 not reported — Listed A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers co... —
CVE-2019-5825 not reported — Listed Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption... —
CVE-2019-7192 not reported — Listed QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized acces... —
CVE-2019-7193 not reported — Listed QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system. —
CVE-2019-7194 not reported — Listed QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or mod... —