Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2014-9163 | not reported | — | Listed | Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. | — |
| CVE-2015-0311 | not reported | — | Listed | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. | — |
| CVE-2015-0313 | not reported | — | Listed | Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. | — |
| CVE-2015-2502 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service... | — |
| CVE-2015-3113 | not reported | — | Listed | Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. | — |
| CVE-2015-5122 | not reported | — | Listed | Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attac... | — |
| CVE-2015-5123 | not reported | — | Listed | Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attacker... | — |
| CVE-2018-20753 | not reported | — | Listed | Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. | — |
| CVE-2022-24521 | not reported | — | Listed | Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-22954 | not reported | — | Listed | VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection. | — |
| CVE-2007-3010 | not reported | — | Listed | masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary co... | — |
| CVE-2010-5330 | not reported | — | Listed | Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi. | — |
| CVE-2014-0780 | not reported | — | Listed | InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords i... | — |
| CVE-2016-4523 | not reported | — | Listed | The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS). | — |
| CVE-2018-7841 | not reported | — | Listed | A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characte... | — |
| CVE-2019-16057 | not reported | — | Listed | The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution. | — |
| CVE-2019-3929 | not reported | — | Listed | Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker c... | — |
| CVE-2022-1364 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2022-22960 | not reported | — | Listed | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissio... | — |
| CVE-2022-22718 | not reported | — | Listed | Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation. | — |