Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-6204 | not reported | — | Listed | Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code. | — |
| CVE-2025-24893 | not reported | — | Listed | XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a requ... | — |
| CVE-2025-48703 | not reported | — | Listed | CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code exe... | — |
| CVE-2025-9242 | not reported | — | Listed | WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to... | — |
| CVE-2025-62215 | not reported | — | Listed | Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileg... | — |
| CVE-2025-13223 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption. | — |
| CVE-2021-26829 | not reported | — | Listed | OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm. | — |
| CVE-2021-26828 | not reported | — | Listed | OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload a... | — |
| CVE-2025-66644 | not reported | — | Listed | Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands. | — |
| CVE-2022-37055 | not reported | — | Listed | D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted... | — |
| CVE-2025-6218 | not reported | — | Listed | RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user. | — |
| CVE-2018-4063 | not reported | — | Listed | Sierra Wireless AirLink ALEOS contains an unrestricted upload of file with dangerous type vulnerability. A specially crafted HTTP request ca... | — |
| CVE-2025-59718 | not reported | — | Listed | Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that... | — |
| CVE-2025-20393 | not reported | — | Listed | Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability t... | — |
| CVE-2025-40602 | not reported | — | Listed | SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC... | — |
| CVE-2023-52163 | not reported | — | Listed | Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi. | — |
| CVE-2025-14847 | not reported | — | Listed | MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulne... | — |
| CVE-2025-37164 | not reported | — | Listed | Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote... | — |
| CVE-2009-0556 | not reported | — | Listed | Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint... | — |
| CVE-2026-20805 | not reported | — | Listed | Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose in... | — |