Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-4262 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2022-26501 | not reported | — | Listed | The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remo... | — |
| CVE-2022-26500 | not reported | — | Listed | The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remo... | — |
| CVE-2022-27518 | not reported | — | Listed | Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypas... | — |
| CVE-2022-44698 | not reported | — | Listed | Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW)... | — |
| CVE-2022-42475 | not reported | — | Listed | Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote... | — |
| CVE-2022-42856 | not reported | — | Listed | Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution. | — |
| CVE-2018-18809 | not reported | — | Listed | TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host syst... | — |
| CVE-2018-5430 | not reported | — | Listed | TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web applic... | — |
| CVE-2023-21674 | not reported | — | Listed | Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-41080 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with C... | — |
| CVE-2022-44877 | not reported | — | Listed | CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute com... | — |
| CVE-2022-47966 | not reported | — | Listed | Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-par... | — |
| CVE-2017-11357 | not reported | — | Listed | Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in... | — |
| CVE-2023-22952 | not reported | — | Listed | Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PH... | — |
| CVE-2022-21587 | not reported | — | Listed | Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compro... | — |
| CVE-2023-0669 | not reported | — | Listed | Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Serv... | — |
| CVE-2022-24990 | not reported | — | Listed | TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpo... | — |
| CVE-2023-21823 | not reported | — | Listed | Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2023-23529 | not reported | — | Listed | Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously c... | — |