Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-16651 | not reported | — | Listed | Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment... | — |
| CVE-2021-35395 | not reported | — | Listed | Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submi... | — |
| CVE-2020-10221 | not reported | — | Listed | rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS comma... | — |
| CVE-2021-1905 | not reported | — | Listed | Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultane... | — |
| CVE-2021-1906 | not reported | — | Listed | Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistrat... | — |
| CVE-2019-11539 | not reported | — | Listed | Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands. | — |
| CVE-2019-11510 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access... | — |
| CVE-2021-22899 | not reported | — | Listed | Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code executi... | — |
| CVE-2020-8260 | not reported | — | Listed | Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolle... | — |
| CVE-2021-22894 | not reported | — | Listed | Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execu... | — |
| CVE-2021-22900 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file... | — |
| CVE-2020-8243 | not reported | — | Listed | Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to u... | — |
| CVE-2021-22893 | not reported | — | Listed | Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via licens... | — |
| CVE-2019-18935 | not reported | — | Listed | Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code e... | — |
| CVE-2020-8644 | not reported | — | Listed | PlaySMS contains a server-side template injection vulnerability that allows for remote code execution. | — |
| CVE-2020-14883 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and a... | — |
| CVE-2020-14882 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerabil... | — |
| CVE-2020-14750 | not reported | — | Listed | Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vul... | — |
| CVE-2015-4852 | not reported | — | Listed | Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code... | — |
| CVE-2020-14871 | not reported | — | Listed | Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity,... | — |