Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-1906 | not reported | — | Listed | Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistrat... | — |
| CVE-2019-11539 | not reported | — | Listed | Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands. | — |
| CVE-2019-11510 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access... | — |
| CVE-2021-22899 | not reported | — | Listed | Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code executi... | — |
| CVE-2020-8260 | not reported | — | Listed | Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolle... | — |
| CVE-2021-22894 | not reported | — | Listed | Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execu... | — |
| CVE-2021-22900 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file... | — |
| CVE-2020-8243 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to u... | — |
| CVE-2021-22893 | not reported | — | Listed | Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via licens... | — |
| CVE-2019-18935 | not reported | — | Listed | Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code e... | — |
| CVE-2020-8644 | not reported | — | Listed | PlaySMS contains a server-side template injection vulnerability that allows for remote code execution. | — |
| CVE-2020-14883 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and a... | — |
| CVE-2020-14882 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerabil... | — |
| CVE-2020-14750 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vul... | — |
| CVE-2015-4852 | not reported | — | Listed | Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code... | — |
| CVE-2020-14871 | not reported | — | Listed | Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity,... | — |
| CVE-2012-3152 | not reported | — | Listed | Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and... | — |
| CVE-2020-2555 | not reported | — | Listed | Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or... | — |
| CVE-2019-19356 | not reported | — | Listed | Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the rout... | — |
| CVE-2020-26919 | not reported | — | Listed | Netgear JGS516PE devices contain a missing function level access control vulnerability. | — |