Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-30632 | not reported | — | Listed | Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption... | — |
| CVE-2020-16009 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-37976 | not reported | — | Listed | Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain po... | — |
| CVE-2020-16017 | not reported | — | Listed | Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentiall... | — |
| CVE-2021-21166 | not reported | — | Listed | Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted H... | — |
| CVE-2020-15999 | not reported | — | Listed | Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the fun... | — |
| CVE-2020-16010 | not reported | — | Listed | Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer p... | — |
| CVE-2018-13379 | not reported | — | Listed | Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS s... | — |
| CVE-2019-5591 | not reported | — | Listed | Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept s... | — |
| CVE-2021-35464 | not reported | — | Listed | ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccver... | — |
| CVE-2021-22986 | not reported | — | Listed | F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthe... | — |
| CVE-2020-5902 | not reported | — | Listed | F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages. | — |
| CVE-2020-8655 | not reported | — | Listed | EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scrip... | — |
| CVE-2020-8657 | not reported | — | Listed | EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacke... | — |
| CVE-2018-6789 | not reported | — | Listed | Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution. | — |
| CVE-2021-22205 | not reported | — | Listed | GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code ex... | — |
| CVE-2018-7600 | not reported | — | Listed | Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site,... | — |
| CVE-2020-8515 | not reported | — | Listed | DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2019-15752 | not reported | — | Listed | Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker... | — |
| CVE-2017-9822 | not reported | — | Listed | DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization. | — |