Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2015-3035 | not reported | — | Listed | Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in t... | — |
| CVE-2015-4068 | not reported | — | Listed | Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service. | — |
| CVE-2016-0752 | not reported | — | Listed | Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files. | — |
| CVE-2016-10174 | not reported | — | Listed | The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution. | — |
| CVE-2016-11021 | not reported | — | Listed | setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command. | — |
| CVE-2016-1555 | not reported | — | Listed | Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. E... | — |
| CVE-2016-4171 | not reported | — | Listed | Unspecified vulnerability in Adobe Flash Player allows for remote code execution. | — |
| CVE-2016-7892 | not reported | — | Listed | Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. | — |
| CVE-2017-0146 | not reported | — | Listed | The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution. | — |
| CVE-2017-12615 | not reported | — | Listed | When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted requ... | — |
| CVE-2017-12617 | not reported | — | Listed | When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be reques... | — |
| CVE-2017-3881 | not reported | — | Listed | A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthe... | — |
| CVE-2017-6316 | not reported | — | Listed | A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudB... | — |
| CVE-2017-6334 | not reported | — | Listed | dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands | — |
| CVE-2018-0125 | not reported | — | Listed | A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as r... | — |
| CVE-2018-0147 | not reported | — | Listed | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to... | — |
| CVE-2018-11138 | not reported | — | Listed | The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be... | — |
| CVE-2018-1273 | not reported | — | Listed | Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution. | — |
| CVE-2018-14839 | not reported | — | Listed | LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability. | — |
| CVE-2018-6961 | not reported | — | Listed | VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this is... | — |