Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-30807 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execut... | — |
| CVE-2020-27930 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processin... | — |
| CVE-2021-30860 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing... | — |
| CVE-2019-6223 | not reported | — | Listed | Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to... | — |
| CVE-2021-30858 | not reported | — | Listed | Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted... | — |
| CVE-2018-11776 | not reported | — | Listed | Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespa... | — |
| CVE-2017-5638 | not reported | — | Listed | Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution. | — |
| CVE-2020-17530 | not reported | — | Listed | Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to... | — |
| CVE-2019-17558 | not reported | — | Listed | The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution. | — |
| CVE-2016-4437 | not reported | — | Listed | Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspeci... | — |
| CVE-2019-0211 | not reported | — | Listed | Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts execu... | — |
| CVE-2021-41773 | not reported | — | Listed | Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directo... | — |
| CVE-2021-42013 | not reported | — | Listed | Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directo... | — |
| CVE-2017-9805 | not reported | — | Listed | Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead... | — |
| CVE-2020-0069 | not reported | — | Listed | Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue... | — |
| CVE-2020-0041 | not reported | — | Listed | Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allo... | — |
| CVE-2019-2215 | not reported | — | Listed | Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Ker... | — |
| CVE-2020-5735 | not reported | — | Listed | Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attack... | — |
| CVE-2018-4878 | not reported | — | Listed | Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. | — |
| CVE-2018-15961 | not reported | — | Listed | Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution. | — |