Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-31955 | not reported | — | Listed | Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attack... | — |
| CVE-2020-0878 | not reported | — | Listed | Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the c... | — |
| CVE-2016-0167 | not reported | — | Listed | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application | — |
| CVE-2021-38647 | not reported | — | Listed | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote c... | — |
| CVE-2014-1812 | not reported | — | Listed | Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured... | — |
| CVE-2021-22502 | not reported | — | Listed | Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2021-22506 | not reported | — | Listed | Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the A... | — |
| CVE-2021-23874 | not reported | — | Listed | McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges a... | — |
| CVE-2020-7961 | not reported | — | Listed | Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services... | — |
| CVE-2021-30116 | not reported | — | Listed | Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the session... | — |
| CVE-2020-15505 | not reported | — | Listed | Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database (RDB) products contain an unspecified vulnerability that al... | — |
| CVE-2016-3718 | not reported | — | Listed | ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image. | — |
| CVE-2016-3715 | not reported | — | Listed | ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol,... | — |
| CVE-2019-4716 | not reported | — | Listed | IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute... | — |
| CVE-2020-4428 | not reported | — | Listed | IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the sy... | — |
| CVE-2020-4427 | not reported | — | Listed | IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when confi... | — |
| CVE-2020-4430 | not reported | — | Listed | IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories... | — |
| CVE-2021-30563 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-21220 | not reported | — | Listed | Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corr... | — |
| CVE-2021-21193 | not reported | — | Listed | Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a cra... | — |