Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-40799 | not reported | — | Listed | D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS l... | — |
| CVE-2020-25079 | not reported | — | Listed | D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could b... | — |
| CVE-2020-25078 | not reported | — | Listed | D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure.... | — |
| CVE-2013-3893 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be... | — |
| CVE-2007-0671 | not reported | — | Listed | Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. T... | — |
| CVE-2025-8088 | not reported | — | Listed | RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to... | — |
| CVE-2025-8876 | not reported | — | Listed | N-able N-Central contains a command injection vulnerability via improper sanitization of user input. | — |
| CVE-2025-54948 | not reported | — | Listed | Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated rem... | — |
| CVE-2025-43300 | not reported | — | Listed | Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. | — |
| CVE-2024-8069 | not reported | — | Listed | Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege... | — |
| CVE-2024-8068 | not reported | — | Listed | Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService... | — |
| CVE-2025-7775 | not reported | — | Listed | Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial... | — |
| CVE-2020-24363 | not reported | — | Listed | TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated... | — |
| CVE-2025-48543 | not reported | — | Listed | Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation. | — |
| CVE-2025-5086 | not reported | — | Listed | Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution. | — |
| CVE-2025-10585 | not reported | — | Listed | Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. | — |
| CVE-2021-21311 | not reported | — | Listed | Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive... | — |
| CVE-2025-59689 | not reported | — | Listed | Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail att... | — |
| CVE-2025-32463 | not reported | — | Listed | Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to le... | — |
| CVE-2025-4008 | not reported | — | Listed | Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary comma... | — |