Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-0262 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Office. | — |
| CVE-2017-0263 | not reported | — | Listed | Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in m... | — |
| CVE-2017-10271 | not reported | — | Listed | Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. | — |
| CVE-2017-8464 | not reported | — | Listed | Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK... | — |
| CVE-2017-9791 | not reported | — | Listed | The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMess... | — |
| CVE-2018-1000861 | not reported | — | Listed | A code execution vulnerability exists in the Stapler web framework used by Jenkins | — |
| CVE-2021-36934 | not reported | — | Listed | If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escala... | — |
| CVE-2022-22620 | not reported | — | Listed | Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted... | — |
| CVE-2013-3906 | not reported | — | Listed | Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution. | — |
| CVE-2014-1761 | not reported | — | Listed | Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution. | — |
| CVE-2017-9841 | not reported | — | Listed | PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a " | — |
| CVE-2018-20250 | not reported | — | Listed | WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution | — |
| CVE-2018-8174 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem... | — |
| CVE-2019-0752 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer | — |
| CVE-2022-0609 | not reported | — | Listed | Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2022-24086 | not reported | — | Listed | Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution. | — |
| CVE-2022-23134 | not reported | — | Listed | Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. | — |
| CVE-2022-23131 | not reported | — | Listed | Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML. | — |
| CVE-2014-6352 | not reported | — | Listed | Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object. | — |
| CVE-2017-0222 | not reported | — | Listed | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. | — |