Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-31166 | not reported | — | Listed | Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution. | — |
| CVE-2021-3156 | not reported | — | Listed | Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation. | — |
| CVE-2017-11317 | not reported | — | Listed | Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code. | — |
| CVE-2020-2509 | not reported | — | Listed | QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution. | — |
| CVE-2021-22600 | not reported | — | Listed | Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user co... | — |
| CVE-2021-27852 | not reported | — | Listed | Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute a... | — |
| CVE-2021-39793 | not reported | — | Listed | Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege. | — |
| CVE-2021-42278 | not reported | — | Listed | Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2021-42287 | not reported | — | Listed | Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-23176 | not reported | — | Listed | WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged managemen... | — |
| CVE-2014-9163 | not reported | — | Listed | Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. | — |
| CVE-2015-0311 | not reported | — | Listed | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. | — |
| CVE-2015-0313 | not reported | — | Listed | Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. | — |
| CVE-2015-2502 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service... | — |
| CVE-2015-3113 | not reported | — | Listed | Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. | — |
| CVE-2015-5122 | not reported | — | Listed | Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attac... | — |
| CVE-2015-5123 | not reported | — | Listed | Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attacker... | — |
| CVE-2018-20753 | not reported | — | Listed | Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. | — |
| CVE-2022-24521 | not reported | — | Listed | Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-22954 | not reported | — | Listed | VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection. | — |