Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2009-1537 | not reported | — | Listed | Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could... | — |
| CVE-2008-4250 | not reported | — | Listed | Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary c... | — |
| CVE-2026-34926 | not reported | — | Listed | Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify... | — |
| CVE-2024-21182 | not reported | — | Listed | Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compr... | — |
| CVE-2025-48595 | not reported | — | Listed | Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation. | — |
| CVE-2022-0492 | not reported | — | Listed | Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent f... | — |
| CVE-2026-45247 | not reported | — | Listed | Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to ach... | — |
| CVE-2026-50751 | not reported | — | Listed | Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated rem... | — |
| CVE-2026-20245 | not reported | — | Listed | Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability... | — |
| CVE-2026-11645 | not reported | — | Listed | Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox... | — |
| CVE-2026-35273 | not reported | — | Listed | Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthen... | — |
| CVE-2026-20262 | not reported | — | Listed | Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to cre... | — |
| CVE-2026-54420 | not reported | — | Listed | LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access... | — |
| CVE-2026-48907 | not reported | — | Listed | Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP cod... | — |
| CVE-2026-20253 | not reported | — | Listed | Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create... | — |
| CVE-2026-34908 | not reported | — | Listed | Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make u... | — |
| CVE-2026-34909 | not reported | — | Listed | Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on... | — |
| CVE-2026-34910 | not reported | — | Listed | Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to cond... | — |
| CVE-2026-12569 | not reported | — | Listed | PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitr... | — |
| CVE-2026-45659 | not reported | — | Listed | Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code o... | — |