Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-16920 | not reported | — | Listed | Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise. | — |
| CVE-2019-2616 | not reported | — | Listed | Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source... | — |
| CVE-2019-6340 | not reported | — | Listed | In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some... | — |
| CVE-2020-1631 | not reported | — | Listed | A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass... | — |
| CVE-2020-1956 | not reported | — | Listed | Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution. | — |
| CVE-2020-2021 | not reported | — | Listed | Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication. | — |
| CVE-2020-2506 | not reported | — | Listed | QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive inform... | — |
| CVE-2020-25223 | not reported | — | Listed | A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM. | — |
| CVE-2020-5410 | not reported | — | Listed | Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration file... | — |
| CVE-2020-7247 | not reported | — | Listed | smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands a... | — |
| CVE-2020-9377 | not reported | — | Listed | D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php. | — |
| CVE-2021-22941 | not reported | — | Listed | Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storag... | — |
| CVE-2021-42237 | not reported | — | Listed | Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution. | — |
| CVE-2022-21999 | not reported | — | Listed | Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation. | — |
| CVE-2022-26143 | not reported | — | Listed | A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to... | — |
| CVE-2022-26318 | not reported | — | Listed | On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code. | — |
| CVE-2010-4398 | not reported | — | Listed | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges,... | — |
| CVE-2011-2005 | not reported | — | Listed | afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows... | — |
| CVE-2012-0518 | not reported | — | Listed | Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to a... | — |
| CVE-2012-2034 | not reported | — | Listed | Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). | — |