Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-5689 | not reported | — | Listed | Intel products contain a vulnerability which can allow attackers to perform privilege escalation. | — |
| CVE-2020-0787 | not reported | — | Listed | Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit... | — |
| CVE-2020-5722 | not reported | — | Listed | Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for cod... | — |
| CVE-2021-20038 | not reported | — | Listed | SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in cod... | — |
| CVE-2022-22587 | not reported | — | Listed | Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with... | — |
| CVE-2022-21882 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2014-4404 | not reported | — | Listed | Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbi... | — |
| CVE-2015-1130 | not reported | — | Listed | The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileg... | — |
| CVE-2015-1635 | not reported | — | Listed | Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution. | — |
| CVE-2015-2051 | not reported | — | Listed | D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interf... | — |
| CVE-2016-3088 | not reported | — | Listed | The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by... | — |
| CVE-2017-0144 | not reported | — | Listed | The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. | — |
| CVE-2017-0145 | not reported | — | Listed | The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. | — |
| CVE-2017-0262 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Office. | — |
| CVE-2017-0263 | not reported | — | Listed | Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in m... | — |
| CVE-2017-10271 | not reported | — | Listed | Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. | — |
| CVE-2017-8464 | not reported | — | Listed | Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK... | — |
| CVE-2017-9791 | not reported | — | Listed | The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMess... | — |
| CVE-2018-1000861 | not reported | — | Listed | A code execution vulnerability exists in the Stapler web framework used by Jenkins | — |
| CVE-2021-36934 | not reported | — | Listed | If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escala... | — |