Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-0147 | not reported | — | Listed | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to... | — |
| CVE-2018-11138 | not reported | — | Listed | The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be... | — |
| CVE-2018-1273 | not reported | — | Listed | Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution. | — |
| CVE-2018-14839 | not reported | — | Listed | LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability. | — |
| CVE-2018-6961 | not reported | — | Listed | VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this is... | — |
| CVE-2018-8373 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. | — |
| CVE-2018-8414 | not reported | — | Listed | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths. | — |
| CVE-2019-0903 | not reported | — | Listed | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An a... | — |
| CVE-2019-1003030 | not reported | — | Listed | Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote co... | — |
| CVE-2019-10068 | not reported | — | Listed | Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution. | — |
| CVE-2019-11043 | not reported | — | Listed | In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing... | — |
| CVE-2019-12989 | not reported | — | Listed | Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection. | — |
| CVE-2019-12991 | not reported | — | Listed | Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance. | — |
| CVE-2019-15107 | not reported | — | Listed | An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability. | — |
| CVE-2019-16920 | not reported | — | Listed | Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise. | — |
| CVE-2019-2616 | not reported | — | Listed | Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source... | — |
| CVE-2019-6340 | not reported | — | Listed | In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some... | — |
| CVE-2020-1631 | not reported | — | Listed | A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass... | — |
| CVE-2020-1956 | not reported | — | Listed | Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution. | — |
| CVE-2020-2021 | not reported | — | Listed | Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication. | — |