Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2017-5070 not reported — Listed Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a craft... —
CVE-2017-6862 not reported — Listed Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution. —
CVE-2018-17463 not reported — Listed Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted... —
CVE-2018-17480 not reported — Listed Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a cr... —
CVE-2018-4990 not reported — Listed Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. —
CVE-2018-6065 not reported — Listed Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption vi... —
CVE-2019-15271 not reported — Listed A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers co... —
CVE-2019-5825 not reported — Listed Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption... —
CVE-2019-7192 not reported — Listed QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized acces... —
CVE-2019-7193 not reported — Listed QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system. —
CVE-2019-7194 not reported — Listed QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or mod... —
CVE-2019-7195 not reported — Listed QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or mod... —
CVE-2016-2388 not reported — Listed The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted... —
CVE-2016-2386 not reported — Listed SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands v... —
CVE-2021-38163 not reported — Listed SAP NetWeaver contains a vulnerability that allows unrestricted file upload. —
CVE-2022-30190 not reported — Listed A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker... —
CVE-2018-4344 not reported — Listed Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution. —
CVE-2019-8605 not reported — Listed A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privil... —
CVE-2020-9907 not reported — Listed Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges... —
CVE-2020-3837 not reported — Listed Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with k... —