Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2016-3976 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains a directory traversal vulnerability via a ..\ (dot dot backslash) in the fileName p... | — |
| CVE-2020-6207 | not reported | — | Listed | SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in compl... | — |
| CVE-2020-6287 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticat... | — |
| CVE-2016-9563 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated u... | — |
| CVE-2010-5326 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HT... | — |
| CVE-2018-2380 | not reported | — | Listed | SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validatio... | — |
| CVE-2020-16846 | not reported | — | Listed | SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using... | — |
| CVE-2020-11651 | not reported | — | Listed | SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method cal... | — |
| CVE-2020-11652 | not reported | — | Listed | SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated... | — |
| CVE-2017-16651 | not reported | — | Listed | Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment... | — |
| CVE-2021-35395 | not reported | — | Listed | Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submi... | — |
| CVE-2020-10221 | not reported | — | Listed | rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS comma... | — |
| CVE-2021-1905 | not reported | — | Listed | Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultane... | — |
| CVE-2021-1906 | not reported | — | Listed | Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistrat... | — |
| CVE-2019-11539 | not reported | — | Listed | Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands. | — |
| CVE-2019-11510 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access... | — |
| CVE-2021-22899 | not reported | — | Listed | Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code executi... | — |
| CVE-2020-8260 | not reported | — | Listed | Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolle... | — |
| CVE-2021-22894 | not reported | — | Listed | Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execu... | — |
| CVE-2021-22900 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file... | — |