Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-1731 | not reported | — | Listed | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation cou... | — |
| CVE-2026-2441 | not reported | — | Listed | Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2008-0015 | not reported | — | Listed | Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by const... | — |
| CVE-2024-7694 | not reported | — | Listed | TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware do... | — |
| CVE-2020-7796 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is en... | — |
| CVE-2026-22769 | not reported | — | Listed | Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated... | — |
| CVE-2025-68461 | not reported | — | Listed | RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document. | — |
| CVE-2025-49113 | not reported | — | Listed | RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by authenticated users becaus... | — |
| CVE-2026-25108 | not reported | — | Listed | Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a speciall... | — |
| CVE-2026-20127 | not reported | — | Listed | Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authenticat... | — |
| CVE-2022-20775 | not reported | — | Listed | Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via im... | — |
| CVE-2026-21385 | not reported | — | Listed | Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation. | — |
| CVE-2026-22719 | not reported | — | Listed | Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unau... | — |
| CVE-2023-41974 | not reported | — | Listed | Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges. | — |
| CVE-2021-30952 | not reported | — | Listed | Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously c... | — |
| CVE-2021-22681 | not reported | — | Listed | Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key... | — |
| CVE-2017-7921 | not reported | — | Listed | Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the... | — |
| CVE-2026-1603 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote u... | — |
| CVE-2026-3909 | not reported | — | Listed | Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a cr... | — |
| CVE-2026-3910 | not reported | — | Listed | Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remo... | — |