Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-38647 | not reported | — | Listed | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote c... | — |
| CVE-2014-1812 | not reported | — | Listed | Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured... | — |
| CVE-2021-22502 | not reported | — | Listed | Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2021-22506 | not reported | — | Listed | Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the A... | — |
| CVE-2021-23874 | not reported | — | Listed | McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges a... | — |
| CVE-2020-7961 | not reported | — | Listed | Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services... | — |
| CVE-2021-30116 | not reported | — | Listed | Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the session... | — |
| CVE-2020-15505 | not reported | — | Listed | Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database (RDB) products contain an unspecified vulnerability that al... | — |
| CVE-2016-3718 | not reported | — | Listed | ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image. | — |
| CVE-2016-3715 | not reported | — | Listed | ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol,... | — |
| CVE-2019-4716 | not reported | — | Listed | IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute... | — |
| CVE-2020-4428 | not reported | — | Listed | IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the sy... | — |
| CVE-2020-4427 | not reported | — | Listed | IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when confi... | — |
| CVE-2020-4430 | not reported | — | Listed | IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories... | — |
| CVE-2021-30563 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-21220 | not reported | — | Listed | Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corr... | — |
| CVE-2021-21193 | not reported | — | Listed | Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a cra... | — |
| CVE-2021-21224 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a craft... | — |
| CVE-2021-38003 | not reported | — | Listed | Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption.... | — |
| CVE-2021-38000 | not reported | — | Listed | Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malici... | — |