Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-42013 | not reported | — | Listed | Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directo... | — |
| CVE-2017-9805 | not reported | — | Listed | Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead... | — |
| CVE-2020-0069 | not reported | — | Listed | Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue... | — |
| CVE-2020-0041 | not reported | — | Listed | Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allo... | — |
| CVE-2019-2215 | not reported | — | Listed | Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Ker... | — |
| CVE-2020-5735 | not reported | — | Listed | Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attack... | — |
| CVE-2018-4878 | not reported | — | Listed | Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. | — |
| CVE-2018-15961 | not reported | — | Listed | Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution. | — |
| CVE-2018-4939 | not reported | — | Listed | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution. | — |
| CVE-2021-28550 | not reported | — | Listed | Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in t... | — |
| CVE-2021-21017 | not reported | — | Listed | Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code e... | — |
| CVE-2021-27103 | not reported | — | Listed | Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html. | — |
| CVE-2021-27101 | not reported | — | Listed | Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html. | — |
| CVE-2021-27102 | not reported | — | Listed | Accellion FTA contains an OS command injection vulnerability exploited via a local web service call. | — |
| CVE-2021-27104 | not reported | — | Listed | Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints. | — |
| CVE-2021-42292 | not reported | — | Listed | A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution. | — |
| CVE-2021-42321 | not reported | — | Listed | An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution... | — |
| CVE-2021-40449 | not reported | — | Listed | Unspecified vulnerability allows for an authenticated user to escalate privileges. | — |
| CVE-2021-22204 | not reported | — | Listed | Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing t... | — |
| CVE-2021-44077 | not reported | — | Listed | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to un... | — |