Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-10758 | not reported | — | Listed | mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. | — |
| CVE-2020-8816 | not reported | — | Listed | Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. | — |
| CVE-2020-17463 | not reported | — | Listed | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. | — |
| CVE-2010-1871 | not reported | — | Listed | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote cod... | — |
| CVE-2017-17562 | not reported | — | Listed | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. | — |
| CVE-2021-44168 | not reported | — | Listed | Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files. | — |
| CVE-2019-0193 | not reported | — | Listed | The optional Apache Solr module DataImportHandler contains a code injection vulnerability. | — |
| CVE-2019-7238 | not reported | — | Listed | Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution... | — |
| CVE-2021-35394 | not reported | — | Listed | RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution. | — |
| CVE-2019-13272 | not reported | — | Listed | Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root ac... | — |
| CVE-2021-44515 | not reported | — | Listed | Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop C... | — |
| CVE-2021-4102 | not reported | — | Listed | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-43890 | not reported | — | Listed | Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability. | — |
| CVE-2021-27860 | not reported | — | Listed | A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to uplo... | — |
| CVE-2019-7609 | not reported | — | Listed | Kibana contain an arbitrary code execution flaw in the Timelion visualizer. | — |
| CVE-2017-1000486 | not reported | — | Listed | Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution | — |
| CVE-2015-7450 | not reported | — | Listed | Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allo... | — |
| CVE-2019-10149 | not reported | — | Listed | Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. | — |
| CVE-2018-13383 | not reported | — | Listed | A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users. | — |
| CVE-2018-13382 | not reported | — | Listed | An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to mo... | — |