Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-23376 | not reported | — | Listed | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2023-21715 | not reported | — | Listed | Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted syst... | — |
| CVE-2022-46169 | not reported | — | Listed | Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code. | — |
| CVE-2022-40765 | not reported | — | Listed | The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within... | — |
| CVE-2022-41223 | not reported | — | Listed | The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the con... | — |
| CVE-2022-47986 | not reported | — | Listed | IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. | — |
| CVE-2022-36537 | not reported | — | Listed | ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located... | — |
| CVE-2022-35914 | not reported | — | Listed | Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed. | — |
| CVE-2022-33891 | not reported | — | Listed | Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled. | — |
| CVE-2022-28810 | not reported | — | Listed | Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password cha... | — |
| CVE-2020-5741 | not reported | — | Listed | Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex acco... | — |
| CVE-2021-39144 | not reported | — | Listed | XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or injec... | — |
| CVE-2022-41328 | not reported | — | Listed | Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI... | — |
| CVE-2023-24880 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW)... | — |
| CVE-2023-23397 | not reported | — | Listed | Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authen... | — |
| CVE-2023-26360 | not reported | — | Listed | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. | — |
| CVE-2022-22706 | not reported | — | Listed | Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memo... | — |
| CVE-2022-3038 | not reported | — | Listed | Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption... | — |
| CVE-2023-0266 | not reported | — | Listed | Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user. | — |
| CVE-2022-38181 | not reported | — | Listed | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclo... | — |