Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2013-2251 | not reported | — | Listed | Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions. | — |
| CVE-2013-4810 | not reported | — | Listed | HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbit... | — |
| CVE-2013-5223 | not reported | — | Listed | A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary w... | — |
| CVE-2014-0130 | not reported | — | Listed | Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allow... | — |
| CVE-2014-3120 | not reported | — | Listed | Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code. | — |
| CVE-2014-6287 | not reported | — | Listed | The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitra... | — |
| CVE-2014-6324 | not reported | — | Listed | The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges. | — |
| CVE-2014-6332 | not reported | — | Listed | OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site. | — |
| CVE-2015-0666 | not reported | — | Listed | Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read... | — |
| CVE-2015-1187 | not reported | — | Listed | The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution. | — |
| CVE-2015-1427 | not reported | — | Listed | The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell... | — |
| CVE-2015-3035 | not reported | — | Listed | Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in t... | — |
| CVE-2015-4068 | not reported | — | Listed | Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service. | — |
| CVE-2016-0752 | not reported | — | Listed | Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files. | — |
| CVE-2016-10174 | not reported | — | Listed | The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution. | — |
| CVE-2016-11021 | not reported | — | Listed | setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command. | — |
| CVE-2016-1555 | not reported | — | Listed | Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. E... | — |
| CVE-2016-4171 | not reported | — | Listed | Unspecified vulnerability in Adobe Flash Player allows for remote code execution. | — |
| CVE-2016-7892 | not reported | — | Listed | Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. | — |
| CVE-2017-0146 | not reported | — | Listed | The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution. | — |