Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-95385 | medium | 6.5 | No | Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveragi... | 2026-10-02 |
| CVE-2010-0738 | medium | 5.3 | Listed | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 a... | 2026-10-02 |
| CVE-2010-1428 | high | 7.5 | Listed | The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09... | 2026-10-02 |
| CVE-2010-2861 | critical | 9.8 | Listed | Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to re... | 2026-10-02 |
| CVE-2013-0431 | low | 3.7 | Listed | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-... | 2026-10-02 |
| CVE-2022-27924 | high | 7.5 | Listed | Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted insta... | 2026-10-02 |
| CVE-2018-7602 | critical | 9.8 | Listed | A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit... | 2026-10-02 |
| CVE-2022-30333 | high | 7.5 | Listed | RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonst... | 2026-10-02 |
| CVE-2020-12812 | critical | 9.8 | Listed | An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log... | 2026-10-02 |
| CVE-2021-21975 | high | 7.5 | Listed | Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access... | 2026-10-02 |
| CVE-2026-55396 | not reported | — | No | Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 version... | 2026-10-02 |
| CVE-2026-55395 | not reported | — | No | Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote una... | 2026-10-02 |
| CVE-2026-55394 | not reported | — | No | Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to inte... | 2026-10-02 |
| CVE-2026-55393 | not reported | — | No | Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote un... | 2026-10-02 |
| CVE-2026-14984 | not reported | — | No | Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attac... | 2026-10-02 |
| CVE-2026-14983 | not reported | — | No | Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achi... | 2026-10-02 |
| CVE-2026-96289 | not reported | — | No | Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended... | 2026-10-02 |
| CVE-2026-96286 | not reported | — | No | Uncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to... | 2026-10-02 |
| CVE-2026-96277 | not reported | — | No | Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thr... | 2026-10-02 |
| CVE-2026-94646 | not reported | — | No | Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('... | 2026-10-02 |