Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2020-8193 | not reported | — | Listed | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow u... | — |
| CVE-2019-13608 | not reported | — | Listed | Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrie... | — |
| CVE-2018-0296 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an atta... | — |
| CVE-2019-1653 | not reported | — | Listed | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an att... | — |
| CVE-2020-3161 | not reported | — | Listed | Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code r... | — |
| CVE-2020-3569 | not reported | — | Listed | Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Explo... | — |
| CVE-2020-3566 | not reported | — | Listed | Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Explo... | — |
| CVE-2020-3118 | not reported | — | Listed | Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthe... | — |
| CVE-2018-0171 | not reported | — | Listed | Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affec... | — |
| CVE-2021-1498 | not reported | — | Listed | Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execut... | — |
| CVE-2021-1497 | not reported | — | Listed | Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execut... | — |
| CVE-2020-3580 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-s... | — |
| CVE-2020-3452 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requ... | — |
| CVE-2021-42258 | not reported | — | Listed | BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, re... | — |
| CVE-2019-3396 | not reported | — | Listed | Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve pat... | — |
| CVE-2019-11580 | not reported | — | Listed | Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being inc... | — |
| CVE-2021-26084 | not reported | — | Listed | Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an una... | — |
| CVE-2019-3398 | not reported | — | Listed | Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a p... | — |
| CVE-2021-28663 | not reported | — | Listed | Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make i... | — |
| CVE-2021-28664 | not reported | — | Listed | Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain wri... | — |