Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2019-5591 not reported — Listed Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept s... —
CVE-2021-35464 not reported — Listed ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccver... —
CVE-2021-22986 not reported — Listed F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthe... —
CVE-2020-5902 not reported — Listed F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages. —
CVE-2020-8655 not reported — Listed EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scrip... —
CVE-2020-8657 not reported — Listed EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacke... —
CVE-2018-6789 not reported — Listed Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution. —
CVE-2021-22205 not reported — Listed GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code ex... —
CVE-2018-7600 not reported — Listed Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site,... —
CVE-2020-8515 not reported — Listed DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution. —
CVE-2019-15752 not reported — Listed Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker... —
CVE-2017-9822 not reported — Listed DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization. —
CVE-2018-18325 not reported — Listed DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect i... —
CVE-2018-15811 not reported — Listed DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect i... —
CVE-2020-25506 not reported — Listed D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution. —
CVE-2020-29557 not reported — Listed D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution. —
CVE-2019-11634 not reported — Listed Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access prefere... —
CVE-2019-19781 not reported — Listed Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unaut... —
CVE-2020-8196 not reported — Listed Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability. —
CVE-2020-8195 not reported — Listed Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability. —