Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-22894 | not reported | — | Listed | Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execu... | — |
| CVE-2021-22900 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file... | — |
| CVE-2020-8243 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to u... | — |
| CVE-2021-22893 | not reported | — | Listed | Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via licens... | — |
| CVE-2019-18935 | not reported | — | Listed | Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code e... | — |
| CVE-2020-8644 | not reported | — | Listed | PlaySMS contains a server-side template injection vulnerability that allows for remote code execution. | — |
| CVE-2020-14883 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and a... | — |
| CVE-2020-14882 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerabil... | — |
| CVE-2020-14750 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vul... | — |
| CVE-2015-4852 | not reported | — | Listed | Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code... | — |
| CVE-2020-14871 | not reported | — | Listed | Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity,... | — |
| CVE-2012-3152 | not reported | — | Listed | Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and... | — |
| CVE-2020-2555 | not reported | — | Listed | Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or... | — |
| CVE-2019-19356 | not reported | — | Listed | Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the rout... | — |
| CVE-2020-26919 | not reported | — | Listed | Netgear JGS516PE devices contain a missing function level access control vulnerability. | — |
| CVE-2019-15949 | not reported | — | Listed | Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious command... | — |
| CVE-2019-17026 | not reported | — | Listed | Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when... | — |
| CVE-2020-6820 | not reported | — | Listed | Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race con... | — |
| CVE-2020-6819 | not reported | — | Listed | Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The... | — |
| CVE-2021-38648 | not reported | — | Listed | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privileg... | — |