Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-7481 | not reported | — | Listed | SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources. | — |
| CVE-2021-20021 | not reported | — | Listed | SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account... | — |
| CVE-2020-10199 | not reported | — | Listed | Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2016-3643 | not reported | — | Listed | SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo. | — |
| CVE-2021-35211 | not reported | — | Listed | SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution. | — |
| CVE-2020-10148 | not reported | — | Listed | SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands. | — |
| CVE-2019-16256 | not reported | — | Listed | SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI info... | — |
| CVE-2016-3976 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains a directory traversal vulnerability via a ..\ (dot dot backslash) in the fileName p... | — |
| CVE-2020-6207 | not reported | — | Listed | SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in compl... | — |
| CVE-2020-6287 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticat... | — |
| CVE-2016-9563 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated u... | — |
| CVE-2010-5326 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HT... | — |
| CVE-2018-2380 | not reported | — | Listed | SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validatio... | — |
| CVE-2020-16846 | not reported | — | Listed | SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using... | — |
| CVE-2020-11651 | not reported | — | Listed | SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method cal... | — |
| CVE-2020-11652 | not reported | — | Listed | SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated... | — |
| CVE-2017-16651 | not reported | — | Listed | Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment... | — |
| CVE-2021-35395 | not reported | — | Listed | Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submi... | — |
| CVE-2020-10221 | not reported | — | Listed | rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS comma... | — |
| CVE-2021-1905 | not reported | — | Listed | Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultane... | — |