Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2009-3960 | not reported | — | Listed | Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure. | — |
| CVE-2013-0625 | not reported | — | Listed | Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access. | — |
| CVE-2013-0629 | not reported | — | Listed | Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories. | — |
| CVE-2013-0631 | not reported | — | Listed | Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server. | — |
| CVE-2016-6277 | not reported | — | Listed | NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting rem... | — |
| CVE-2017-6077 | not reported | — | Listed | NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution. | — |
| CVE-2019-11581 | not reported | — | Listed | Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution. | — |
| CVE-2020-8218 | not reported | — | Listed | A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code executio... | — |
| CVE-2021-21973 | not reported | — | Listed | VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin... | — |
| CVE-2022-26485 | not reported | — | Listed | Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execut... | — |
| CVE-2022-26486 | not reported | — | Listed | Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. | — |
| CVE-2015-2546 | not reported | — | Listed | The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. | — |
| CVE-2016-3309 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully... | — |
| CVE-2017-0101 | not reported | — | Listed | A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. | — |
| CVE-2018-8120 | not reported | — | Listed | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. | — |
| CVE-2019-0543 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited... | — |
| CVE-2019-0841 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this... | — |
| CVE-2019-1064 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this... | — |
| CVE-2019-1069 | not reported | — | Listed | A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations. | — |
| CVE-2019-1129 | not reported | — | Listed | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this... | — |