Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2019-15949 not reported — Listed Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious command... —
CVE-2019-17026 not reported — Listed Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when... —
CVE-2020-6820 not reported — Listed Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race con... —
CVE-2020-6819 not reported — Listed Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The... —
CVE-2021-38648 not reported — Listed Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privileg... —
CVE-2021-36955 not reported — Listed Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. —
CVE-2019-0863 not reported — Listed Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code exe... —
CVE-2016-3235 not reported — Listed Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly vali... —
CVE-2019-1214 not reported — Listed Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation. —
CVE-2020-1147 not reported — Listed Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to c... —
CVE-2021-26857 not reported — Listed Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the Pro... —
CVE-2019-0808 not reported — Listed Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful... —
CVE-2020-0646 not reported — Listed Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution. —
CVE-2019-0604 not reported — Listed Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability cou... —
CVE-2020-0601 not reported — Listed Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certif... —
CVE-2021-34448 not reported — Listed Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption. —
CVE-2021-1675 not reported — Listed Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution. —
CVE-2021-26855 not reported — Listed Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the Pro... —
CVE-2020-1472 not reported — Listed Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlo... —
CVE-2020-0968 not reported — Listed Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to... —