Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-37975 | not reported | — | Listed | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-30551 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-37973 | not reported | — | Listed | Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to... | — |
| CVE-2021-21148 | not reported | — | Listed | Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption... | — |
| CVE-2021-30633 | not reported | — | Listed | Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer proce... | — |
| CVE-2020-16013 | not reported | — | Listed | Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap c... | — |
| CVE-2021-30632 | not reported | — | Listed | Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption... | — |
| CVE-2020-16009 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-37976 | not reported | — | Listed | Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain po... | — |
| CVE-2020-16017 | not reported | — | Listed | Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentiall... | — |
| CVE-2021-21166 | not reported | — | Listed | Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted H... | — |
| CVE-2020-15999 | not reported | — | Listed | Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the fun... | — |
| CVE-2020-16010 | not reported | — | Listed | Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer p... | — |
| CVE-2018-13379 | not reported | — | Listed | Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS s... | — |
| CVE-2019-5591 | not reported | — | Listed | Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept s... | — |
| CVE-2021-35464 | not reported | — | Listed | ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccver... | — |
| CVE-2021-22986 | not reported | — | Listed | F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthe... | — |
| CVE-2020-5902 | not reported | — | Listed | F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages. | — |
| CVE-2020-8655 | not reported | — | Listed | EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scrip... | — |
| CVE-2020-8657 | not reported | — | Listed | EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacke... | — |