Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2016-10033 | not reported | — | Listed | PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the... | — |
| CVE-2019-5418 | not reported | — | Listed | Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `r... | — |
| CVE-2019-9621 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component. | — |
| CVE-2025-47812 | not reported | — | Listed | Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua co... | — |
| CVE-2025-25257 | not reported | — | Listed | Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or comm... | — |
| CVE-2025-53770 | not reported | — | Listed | Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker... | — |
| CVE-2025-49706 | not reported | — | Listed | Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network... | — |
| CVE-2025-49704 | not reported | — | Listed | Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vu... | — |
| CVE-2025-54309 | not reported | — | Listed | CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and cons... | — |
| CVE-2025-2776 | not reported | — | Listed | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, a... | — |
| CVE-2025-2775 | not reported | — | Listed | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allo... | — |
| CVE-2025-20281 | not reported | — | Listed | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient vali... | — |
| CVE-2025-20337 | not reported | — | Listed | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient vali... | — |
| CVE-2023-2533 | not reported | — | Listed | PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an att... | — |
| CVE-2022-40799 | not reported | — | Listed | D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS l... | — |
| CVE-2020-25079 | not reported | — | Listed | D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could b... | — |
| CVE-2020-25078 | not reported | — | Listed | D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure.... | — |
| CVE-2013-3893 | not reported | — | Listed | Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be... | — |
| CVE-2007-0671 | not reported | — | Listed | Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. T... | — |
| CVE-2025-8088 | not reported | — | Listed | RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to... | — |