Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-5544 | not reported | — | Listed | VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with... | — |
| CVE-2020-17496 | not reported | — | Listed | The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in a... | — |
| CVE-2019-16759 | not reported | — | Listed | The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] param... | — |
| CVE-2020-5847 | not reported | — | Listed | Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This... | — |
| CVE-2020-5849 | not reported | — | Listed | Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is cha... | — |
| CVE-2019-20085 | not reported | — | Listed | TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests. | — |
| CVE-2021-36741 | not reported | — | Listed | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows... | — |
| CVE-2021-36742 | not reported | — | Listed | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows... | — |
| CVE-2020-8599 | not reported | — | Listed | Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affec... | — |
| CVE-2020-24557 | not reported | — | Listed | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability tha... | — |
| CVE-2020-8468 | not reported | — | Listed | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow... | — |
| CVE-2020-8467 | not reported | — | Listed | Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execu... | — |
| CVE-2019-18187 | not reported | — | Listed | Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeSc... | — |
| CVE-2019-9082 | not reported | — | Listed | ThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s=index/\think\app/invokefunction&function... | — |
| CVE-2018-20062 | not reported | — | Listed | ThinkPHP "noneCms" contains an unspecified vulnerability that allows for remote code execution through crafted use of the filter parameter. | — |
| CVE-2018-14558 | not reported | — | Listed | Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd fun... | — |
| CVE-2020-10987 | not reported | — | Listed | Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceN... | — |
| CVE-2021-31755 | not reported | — | Listed | Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post... | — |
| CVE-2017-9248 | not reported | — | Listed | Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose en... | — |
| CVE-2019-18988 | not reported | — | Listed | TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations.... | — |