Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-26258 | not reported | — | Listed | D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution. | — |
| CVE-2022-27593 | not reported | — | Listed | Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which c... | — |
| CVE-2022-3075 | not reported | — | Listed | Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer... | — |
| CVE-2022-32917 | not reported | — | Listed | Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute... | — |
| CVE-2010-2568 | not reported | — | Listed | Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon... | — |
| CVE-2013-2094 | not reported | — | Listed | Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled a... | — |
| CVE-2013-2596 | not reported | — | Listed | Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation. | — |
| CVE-2013-2597 | not reported | — | Listed | The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privileg... | — |
| CVE-2013-6282 | not reported | — | Listed | The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. Thi... | — |
| CVE-2022-40139 | not reported | — | Listed | Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote cod... | — |
| CVE-2022-35405 | not reported | — | Listed | Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code exe... | — |
| CVE-2022-3236 | not reported | — | Listed | A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution. | — |
| CVE-2022-36804 | not reported | — | Listed | Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access... | — |
| CVE-2022-41040 | not reported | — | Listed | Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-4108... | — |
| CVE-2022-41082 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell,"... | — |
| CVE-2022-41033 | not reported | — | Listed | Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-40684 | not reported | — | Listed | Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated atta... | — |
| CVE-2021-3493 | not reported | — | Listed | The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces,... | — |
| CVE-2018-19320 | not reported | — | Listed | The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like func... | — |
| CVE-2018-19321 | not reported | — | Listed | The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functional... | — |