Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-22274 | high | 7.2 | No | The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vC... | 2026-11-03 |
| CVE-2024-20017 | critical | 9.8 | No | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no... | 2026-11-03 |
| CVE-2024-12108 | critical | 9.6 | No | In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API. | 2026-11-03 |
| CVE-2023-41251 | high | 7.2 | No | A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially cra... | 2026-11-03 |
| CVE-2023-0507 | medium | 5.4 | No | Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability... | 2026-11-03 |
| CVE-2022-39324 | low | 3.5 | No | Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapsho... | 2026-11-03 |
| CVE-2023-21748 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-36062 | low | 3.8 | No | Grafana is an open-source platform for monitoring and observability. In versions prior to 8.5.13, 9.0.9, and 9.1.6, Grafana is subject to Im... | 2026-11-03 |
| CVE-2022-34718 | critical | 9.8 | No | Windows TCP/IP Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2022-35768 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-34707 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-23498 | high | 8.8 | No | Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, i... | 2026-11-03 |
| CVE-2022-23552 | medium | 5.4 | No | Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and... | 2026-11-03 |
| CVE-2022-2068 | high | 7.3 | No | In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not pr... | 2026-11-03 |
| CVE-2022-20818 | high | 7.8 | No | Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These... | 2026-11-03 |
| CVE-2022-1292 | high | 7.3 | No | The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operati... | 2026-11-03 |
| CVE-2021-4043 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0. | 2026-11-03 |
| CVE-2015-5477 | high | 7.5 | Listed | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa... | 2026-11-03 |
| CVE-2026-67295 | medium | 6.3 | No | FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibli... | 2026-11-03 |
| CVE-2026-70464 | high | 7.5 | No | rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon co... | 2026-11-03 |