Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2018-6789 not reported — Listed Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution. —
CVE-2021-22205 not reported — Listed GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code ex... —
CVE-2018-7600 not reported — Listed Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site,... —
CVE-2020-8515 not reported — Listed DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution. —
CVE-2019-15752 not reported — Listed Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker... —
CVE-2017-9822 not reported — Listed DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization. —
CVE-2018-18325 not reported — Listed DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect i... —
CVE-2018-15811 not reported — Listed DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect i... —
CVE-2020-25506 not reported — Listed D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution. —
CVE-2020-29557 not reported — Listed D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution. —
CVE-2019-11634 not reported — Listed Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access prefere... —
CVE-2019-19781 not reported — Listed Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unaut... —
CVE-2020-8196 not reported — Listed Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability. —
CVE-2020-8195 not reported — Listed Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability. —
CVE-2020-8193 not reported — Listed Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow u... —
CVE-2019-13608 not reported — Listed Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrie... —
CVE-2018-0296 not reported — Listed Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an atta... —
CVE-2019-1653 not reported — Listed Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an att... —
CVE-2020-3161 not reported — Listed Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code r... —
CVE-2020-3569 not reported — Listed Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Explo... —