Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2016-3715 not reported — Listed ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol,... —
CVE-2019-4716 not reported — Listed IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute... —
CVE-2020-4428 not reported — Listed IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the sy... —
CVE-2020-4427 not reported — Listed IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when confi... —
CVE-2020-4430 not reported — Listed IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories... —
CVE-2021-30563 not reported — Listed Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... —
CVE-2021-21220 not reported — Listed Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corr... —
CVE-2021-21193 not reported — Listed Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a cra... —
CVE-2021-21224 not reported — Listed Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a craft... —
CVE-2021-38003 not reported — Listed Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption.... —
CVE-2021-38000 not reported — Listed Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malici... —
CVE-2021-21206 not reported — Listed Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a cra... —
CVE-2021-30554 not reported — Listed Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a cra... —
CVE-2020-6418 not reported — Listed Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a craf... —
CVE-2021-37975 not reported — Listed Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a... —
CVE-2021-30551 not reported — Listed Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... —
CVE-2021-37973 not reported — Listed Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to... —
CVE-2021-21148 not reported — Listed Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption... —
CVE-2021-30633 not reported — Listed Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer proce... —
CVE-2020-16013 not reported — Listed Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap c... —