Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-2351 | high | 8.3 | No | Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2... | 2026-11-02 |
| CVE-2021-21353 | critical | 9.0 | No | Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the... | 2026-11-02 |
| CVE-2021-1636 | high | 8.8 | No | Microsoft SQL Elevation of Privilege Vulnerability | 2026-11-02 |
| CVE-2020-8908 | low | 3.3 | No | A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially acce... | 2026-11-02 |
| CVE-2020-8231 | high | 7.5 | No | Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. | 2026-11-02 |
| CVE-2020-35538 | medium | 5.5 | No | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. | 2026-11-02 |
| CVE-2020-8169 | high | 7.5 | No | curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over th... | 2026-11-02 |
| CVE-2020-8203 | high | 7.4 | No | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20. | 2026-11-02 |
| CVE-2020-1002 | high | 7.1 | No | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit th... | 2026-11-02 |
| CVE-2020-11022 | medium | 6.1 | No | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM man... | 2026-11-02 |
| CVE-2019-9937 | high | 7.5 | No | In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference i... | 2026-11-02 |
| CVE-2019-20454 | high | 7.5 | No | An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects i... | 2026-11-02 |
| CVE-2019-7364 | high | 7.8 | No | DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Archi... | 2026-11-02 |
| CVE-2019-5439 | medium | 6.5 | No | A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit. | 2026-11-02 |
| CVE-2019-9936 | high | 7.5 | No | In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlit... | 2026-11-02 |
| CVE-2019-5413 | critical | 9.8 | No | An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1. | 2026-11-02 |
| CVE-2019-14970 | high | 7.8 | No | A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow... | 2026-11-02 |
| CVE-2019-15291 | medium | 4.6 | No | An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexc... | 2026-11-02 |
| CVE-2019-1552 | low | 3.3 | No | OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in T... | 2026-11-02 |
| CVE-2019-1543 | high | 7.4 | No | ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce val... | 2026-11-02 |