Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-0179 | not reported | — | Listed | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri... | — |
| CVE-2018-0180 | not reported | — | Listed | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri... | — |
| CVE-2018-8298 | not reported | — | Listed | The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution. | — |
| CVE-2018-8581 | not reported | — | Listed | A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could at... | — |
| CVE-2019-1297 | not reported | — | Listed | A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. | — |
| CVE-2019-1652 | not reported | — | Listed | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an au... | — |
| CVE-2019-16928 | not reported | — | Listed | Exim contains an out-of-bounds write vulnerability which can allow for remote code execution. | — |
| CVE-2020-11899 | not reported | — | Listed | The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability. | — |
| CVE-2020-1938 | not reported | — | Listed | Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such co... | — |
| CVE-2021-41379 | not reported | — | Listed | Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2022-20699 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20700 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20701 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20703 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2022-20708 | not reported | — | Listed | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Ex... | — |
| CVE-2009-3960 | not reported | — | Listed | Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure. | — |
| CVE-2013-0625 | not reported | — | Listed | Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access. | — |
| CVE-2013-0629 | not reported | — | Listed | Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories. | — |
| CVE-2013-0631 | not reported | — | Listed | Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server. | — |
| CVE-2016-6277 | not reported | — | Listed | NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting rem... | — |