Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2016-1646 | not reported | — | Listed | Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibl... | — |
| CVE-2016-5198 | not reported | — | Listed | Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operatio... | — |
| CVE-2017-5030 | not reported | — | Listed | Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page.... | — |
| CVE-2017-5070 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a craft... | — |
| CVE-2017-6862 | not reported | — | Listed | Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution. | — |
| CVE-2018-17463 | not reported | — | Listed | Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted... | — |
| CVE-2018-17480 | not reported | — | Listed | Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a cr... | — |
| CVE-2018-4990 | not reported | — | Listed | Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. | — |
| CVE-2018-6065 | not reported | — | Listed | Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption vi... | — |
| CVE-2019-15271 | not reported | — | Listed | A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers co... | — |
| CVE-2019-5825 | not reported | — | Listed | Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption... | — |
| CVE-2019-7192 | not reported | — | Listed | QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized acces... | — |
| CVE-2019-7193 | not reported | — | Listed | QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system. | — |
| CVE-2019-7194 | not reported | — | Listed | QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or mod... | — |
| CVE-2019-7195 | not reported | — | Listed | QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or mod... | — |
| CVE-2016-2388 | not reported | — | Listed | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted... | — |
| CVE-2016-2386 | not reported | — | Listed | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands v... | — |
| CVE-2021-38163 | not reported | — | Listed | SAP NetWeaver contains a vulnerability that allows unrestricted file upload. | — |
| CVE-2022-30190 | not reported | — | Listed | A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker... | — |
| CVE-2018-4344 | not reported | — | Listed | Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution. | — |