Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2014-0497 | not reported | — | Listed | Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. | — |
| CVE-2013-0643 | not reported | — | Listed | Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute a... | — |
| CVE-2013-0648 | not reported | — | Listed | Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker t... | — |
| CVE-2014-0502 | not reported | — | Listed | Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. | — |
| CVE-2024-27348 | not reported | — | Listed | Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code. | — |
| CVE-2020-0618 | not reported | — | Listed | Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated a... | — |
| CVE-2022-21445 | not reported | — | Listed | Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading t... | — |
| CVE-2020-14644 | not reported | — | Listed | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers wi... | — |
| CVE-2024-8963 | not reported | — | Listed | Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access... | — |
| CVE-2024-7593 | not reported | — | Listed | Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a ch... | — |
| CVE-2023-25280 | not reported | — | Listed | D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges t... | — |
| CVE-2020-15415 | not reported | — | Listed | DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload t... | — |
| CVE-2019-0344 | not reported | — | Listed | SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virt... | — |
| CVE-2024-29824 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same... | — |
| CVE-2024-45519 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated... | — |
| CVE-2024-43047 | not reported | — | Listed | Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of... | — |
| CVE-2024-43572 | not reported | — | Listed | Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. | — |
| CVE-2024-43573 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. | — |
| CVE-2024-23113 | not reported | — | Listed | Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to... | — |
| CVE-2024-9380 | not reported | — | Listed | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authen... | — |