Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2010-1871 | not reported | — | Listed | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote cod... | — |
| CVE-2017-17562 | not reported | — | Listed | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. | — |
| CVE-2021-44168 | not reported | — | Listed | Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files. | — |
| CVE-2019-0193 | not reported | — | Listed | The optional Apache Solr module DataImportHandler contains a code injection vulnerability. | — |
| CVE-2019-7238 | not reported | — | Listed | Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution... | — |
| CVE-2021-35394 | not reported | — | Listed | RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution. | — |
| CVE-2019-13272 | not reported | — | Listed | Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root ac... | — |
| CVE-2021-44515 | not reported | — | Listed | Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop C... | — |
| CVE-2021-4102 | not reported | — | Listed | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-43890 | not reported | — | Listed | Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability. | — |
| CVE-2021-27860 | not reported | — | Listed | A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to uplo... | — |
| CVE-2019-7609 | not reported | — | Listed | Kibana contain an arbitrary code execution flaw in the Timelion visualizer. | — |
| CVE-2017-1000486 | not reported | — | Listed | Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution | — |
| CVE-2015-7450 | not reported | — | Listed | Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allo... | — |
| CVE-2019-10149 | not reported | — | Listed | Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. | — |
| CVE-2018-13383 | not reported | — | Listed | A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users. | — |
| CVE-2018-13382 | not reported | — | Listed | An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to mo... | — |
| CVE-2019-9670 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd compone... | — |
| CVE-2019-1458 | not reported | — | Listed | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP... | — |
| CVE-2020-6572 | not reported | — | Listed | Google Chrome Media contains a use-after-free vulnerability that allows a remote attacker to execute code via a crafted HTML page. | — |