Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-6327 | not reported | — | Listed | Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remo... | — |
| CVE-2020-10181 | not reported | — | Listed | Sumavision Enhanced Multimedia Router (EMR) contains a cross-site request forgery (CSRF) vulnerability allowing the creation of users with e... | — |
| CVE-2020-12271 | not reported | — | Listed | Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTP... | — |
| CVE-2021-20016 | not reported | — | Listed | SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated a... | — |
| CVE-2019-7481 | not reported | — | Listed | SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources. | — |
| CVE-2021-20021 | not reported | — | Listed | SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account... | — |
| CVE-2020-10199 | not reported | — | Listed | Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2016-3643 | not reported | — | Listed | SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo. | — |
| CVE-2021-35211 | not reported | — | Listed | SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution. | — |
| CVE-2020-10148 | not reported | — | Listed | SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands. | — |
| CVE-2019-16256 | not reported | — | Listed | SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI info... | — |
| CVE-2016-3976 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains a directory traversal vulnerability via a ..\ (dot dot backslash) in the fileName p... | — |
| CVE-2020-6207 | not reported | — | Listed | SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in compl... | — |
| CVE-2020-6287 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticat... | — |
| CVE-2016-9563 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated u... | — |
| CVE-2010-5326 | not reported | — | Listed | SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HT... | — |
| CVE-2018-2380 | not reported | — | Listed | SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validatio... | — |
| CVE-2020-16846 | not reported | — | Listed | SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using... | — |
| CVE-2020-11651 | not reported | — | Listed | SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method cal... | — |
| CVE-2020-11652 | not reported | — | Listed | SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated... | — |