Security advisories — page 4

• CVE-2020-0674unknownMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
• CVE-2020-0683unknownMicrosoft Windows Installer Privilege Escalation Vulnerability
• CVE-2020-0688unknownMicrosoft Exchange Server Validation Key Remote Code Execution Vulnerability
• CVE-2021-28310unknownMicrosoft Win32k Privilege Escalation Vulnerability
• CVE-2021-28550unknownAdobe Acrobat and Reader Use-After-Free Vulnerability
• CVE-2021-28663unknownArm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
• CVE-2021-28664unknownArm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
• CVE-2020-0878unknownMicrosoft Edge and Internet Explorer Memory Corruption Vulnerability
• CVE-2020-0938unknownMicrosoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
• CVE-2020-0968unknownMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
• CVE-2020-0986unknownMicrosoft Windows Kernel Privilege Escalation Vulnerability
• CVE-2020-3452highCVE-2020-3452 updated by NVD
• CVE-2020-10148unknownSolarWinds Orion Authentication Bypass Vulnerability
• CVE-2021-30116criticalCVE-2021-30116 updated by NVD
• CVE-2020-10181unknownSumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
• CVE-2020-10189unknownZoho ManageEngine Desktop Central File Upload Vulnerability
• CVE-2020-10199unknownSonatype Nexus Repository Remote Code Execution Vulnerability
• CVE-2021-30551unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2021-30554unknownGoogle Chromium WebGL Use-After-Free Vulnerability
• CVE-2021-30563unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2021-30632unknownGoogle Chromium V8 Out-of-Bounds Write Vulnerability
• CVE-2021-30633unknownGoogle Chromium Indexed DB API Use-After-Free Vulnerability
• CVE-2020-1020unknownMicrosoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
• CVE-2021-30657unknownApple macOS Unspecified Vulnerability
• CVE-2021-30661unknownApple Multiple Products WebKit Storage Use-After-Free Vulnerability
• CVE-2021-30663unknownApple Multiple Products WebKit Integer Overflow Vulnerability
• CVE-2021-30665unknownApple Multiple Products WebKit Memory Corruption Vulnerability
• CVE-2021-30666unknownApple iOS WebKit Buffer Overflow Vulnerability
• CVE-2021-30713unknownApple macOS Unspecified Vulnerability
• CVE-2021-30761unknownApple iOS WebKit Memory Corruption Vulnerability
• CVE-2021-30762unknownApple iOS WebKit Use-After-Free Vulnerability
• CVE-2021-30807unknownApple Multiple Products Memory Corruption Vulnerability
• CVE-2021-30858unknownApple iOS, iPadOS, macOS Use-After-Free Vulnerability
• CVE-2021-30869unknownApple iOS, iPadOS, and macOS Type Confusion Vulnerability
• CVE-2021-31199unknownMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
• CVE-2021-31201unknownMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
• CVE-2020-10221unknownrConfig OS Command Injection Vulnerability
• CVE-2019-19781criticalCVE-2019-19781 updated by NVD
• CVE-2021-31207unknownMicrosoft Exchange Server Security Feature Bypass Vulnerability
• CVE-2021-31755unknownTenda AC11 Router Stack Buffer Overflow Vulnerability
• CVE-2021-31955unknownMicrosoft Windows Kernel Information Disclosure Vulnerability
• CVE-2021-31956unknownMicrosoft Windows NTFS Privilege Escalation Vulnerability
• CVE-2020-1040unknownMicrosoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
• CVE-2021-31979highCVE-2021-31979 updated by NVD
• CVE-2020-1054highCVE-2020-1054 updated by NVD
• CVE-2019-11510unknownIvanti Pulse Connect Secure Arbitrary File Read Vulnerability
• CVE-2020-3566unknownCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
• CVE-2020-3569unknownCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
• CVE-2019-11539unknownIvanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
• CVE-2019-20085unknownTVT NVMS-1000 Directory Traversal Vulnerability
• CVE-2019-11580unknownAtlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
• CVE-2019-11634criticalCVE-2019-11634 updated by NVD
• CVE-2020-3580mediumCVE-2020-3580 updated by NVD
• CVE-2019-1214unknownMicrosoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
• CVE-2021-33739unknownMicrosoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
• CVE-2019-1215unknownMicrosoft Windows Privilege Escalation Vulnerability
• CVE-2021-33742unknownMicrosoft Windows MSHTML Platform Remote Code Execution Vulnerability
• CVE-2019-2215unknownAndroid Kernel Use-After-Free Vulnerability
• CVE-2021-33771highCVE-2021-33771 updated by NVD
• CVE-2020-10987unknownTenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
• CVE-2018-4878unknownAdobe Flash Player Use-After-Free Vulnerability
• CVE-2018-4939unknownAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
• CVE-2019-13608unknownCitrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
• CVE-2019-1367unknownMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
• CVE-2021-34448mediumCVE-2021-34448 updated by NVD
• CVE-2019-1429unknownMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
• CVE-2018-6789unknownExim Buffer Overflow Vulnerability
• CVE-2021-34473criticalCVE-2021-34473 updated by NVD
• CVE-2020-1147unknownMicrosoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
• CVE-2018-7600unknownDrupal Core Remote Code Execution Vulnerability
• CVE-2020-3950unknownVMware Multiple Products Privilege Escalation Vulnerability
• CVE-2020-3952unknownVMware vCenter Server Information Disclosure Vulnerability
• CVE-2020-3992criticalCVE-2020-3992 updated by NVD
• CVE-2020-4006unknownMultiple VMware Products Command Injection Vulnerability
• CVE-2020-4427unknownIBM Data Risk Manager Security Bypass Vulnerability
• CVE-2020-4428unknownIBM Data Risk Manager Remote Code Execution Vulnerability
• CVE-2020-4430unknownIBM Data Risk Manager Directory Traversal Vulnerability
• CVE-2019-15752unknownDocker Desktop Community Edition Privilege Escalation Vulnerability
• CVE-2020-11651unknownSaltStack Salt Authentication Bypass Vulnerability
• CVE-2020-11652unknownSaltStack Salt Path Traversal Vulnerability
• CVE-2020-5735unknownAmcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
• CVE-2021-34523criticalCVE-2021-34523 updated by NVD
• CVE-2020-5847unknownUnraid Remote Code Execution Vulnerability
• CVE-2020-5849unknownUnraid Authentication Bypass Vulnerability
• CVE-2021-34527highCVE-2021-34527 updated by NVD
• CVE-2020-5902unknownF5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
• CVE-2019-15949unknownNagios XI Remote Code Execution Vulnerability
• CVE-2020-11738unknownWordPress Snap Creek Duplicator Plugin File Download Vulnerability
• CVE-2020-6207unknownSAP Solution Manager Missing Authentication for Critical Function Vulnerability
• CVE-2020-6287unknownSAP NetWeaver Missing Authentication for Critical Function Vulnerability
• CVE-2020-6418unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2020-6819unknownMozilla Firefox And Thunderbird Use-After-Free Vulnerability
• CVE-2020-6820unknownMozilla Firefox And Thunderbird Use-After-Free Vulnerability
• CVE-2019-16256unknownSIMalliance Toolbox Browser Command Injection Vulnerability
• CVE-2019-1653unknownCisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
• CVE-2019-16759unknownvBulletin PHP Module Remote Code Execution Vulnerability
• CVE-2021-35211unknownSolarWinds Serv-U Remote Code Execution Vulnerability
• CVE-2021-35395unknownRealtek AP-Router SDK Buffer Overflow Vulnerability
• CVE-2021-35464unknownForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
• CVE-2018-8653unknownMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
• CVE-2020-7961unknownLiferay Portal Deserialization of Untrusted Data Vulnerability
• CVE-2020-12271unknownSophos SFOS SQL Injection Vulnerability
• CVE-2020-8193unknownCitrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
• CVE-2020-8195unknownCitrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
• CVE-2020-8196unknownCitrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
• CVE-2021-36741unknownTrend Micro Multiple Products Improper Input Validation Vulnerability
• CVE-2021-36742unknownTrend Micro Multiple Products Improper Input Validation Vulnerability
• CVE-2020-8243unknownIvanti Pulse Connect Secure Code Execution Vulnerability
• CVE-2020-8260unknownIvanti Pulse Connect Secure Code Execution Vulnerability
• CVE-2019-0211unknownApache HTTP Server Privilege Escalation Vulnerability
• CVE-2021-36942highCVE-2021-36942 updated by NVD
• CVE-2020-8467unknownTrend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
• CVE-2020-8468unknownTrend Micro Multiple Products Content Validation Escape Vulnerability
• CVE-2021-36948highCVE-2021-36948 updated by NVD
• CVE-2020-8515unknownMultiple DrayTek Vigor Routers Web Management Page Vulnerability
• CVE-2020-8599unknownTrend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
• CVE-2020-8644unknownPlaySMS Server-Side Template Injection Vulnerability
• CVE-2021-36955highCVE-2021-36955 updated by NVD
• CVE-2020-8655unknownEyesOfNetwork Improper Privilege Management Vulnerability
• CVE-2020-8657unknownEyesOfNetwork Use of Hard-Coded Credentials Vulnerability
• CVE-2019-17026unknownMozilla Firefox And Thunderbird Type Confusion Vulnerability
• CVE-2019-0541unknownMicrosoft MSHTML Remote Code Execution Vulnerability
• CVE-2019-0604unknownMicrosoft SharePoint Remote Code Execution Vulnerability
• CVE-2020-12812criticalCVE-2020-12812 updated by NVD
• CVE-2020-1350unknownMicrosoft Windows DNS Server Remote Code Execution Vulnerability
• CVE-2020-1380unknownMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
• CVE-2020-9818unknownApple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
• CVE-2020-9819unknownApple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
• CVE-2020-9859unknownApple Multiple Products Code Execution Vulnerability
• CVE-2021-37973unknownGoogle Chromium Portals Use-After-Free Vulnerability
• CVE-2021-37975unknownGoogle Chromium V8 Use-After-Free Vulnerability
• CVE-2021-37976unknownGoogle Chromium Information Disclosure Vulnerability
• CVE-2021-38000unknownGoogle Chromium Intents Improper Input Validation Vulnerability
• CVE-2021-38003unknownGoogle Chromium V8 Memory Corruption Vulnerability
• CVE-2019-3396unknownAtlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
• CVE-2019-3398unknownAtlassian Confluence Server and Data Center Path Traversal Vulnerability
• CVE-2019-0708unknownMicrosoft Remote Desktop Services Remote Code Execution Vulnerability
• CVE-2019-0797unknownMicrosoft Win32k Privilege Escalation Vulnerability
• CVE-2019-0803unknownMicrosoft Win32k Privilege Escalation Vulnerability
• CVE-2019-0808unknownMicrosoft Win32k Privilege Escalation Vulnerability
• CVE-2020-1464unknownMicrosoft Windows Spoofing Vulnerability
• CVE-2021-1497unknownCisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
• CVE-2021-1498unknownCisco HyperFlex HX Data Platform Command Injection Vulnerability
• CVE-2020-1472unknownMicrosoft Netlogon Privilege Escalation Vulnerability
• CVE-2020-14750unknownOracle WebLogic Server Remote Code Execution Vulnerability
• CVE-2021-38645highCVE-2021-38645 updated by NVD
• CVE-2021-38647criticalCVE-2021-38647 updated by NVD
• CVE-2021-38648highCVE-2021-38648 updated by NVD
• CVE-2021-38649highCVE-2021-38649 updated by NVD
• CVE-2021-1647unknownMicrosoft Defender Remote Code Execution Vulnerability
• CVE-2021-1675highCVE-2021-1675 updated by NVD
• CVE-2021-1732highCVE-2021-1732 updated by NVD
• CVE-2021-1782unknownApple Multiple Products Race Condition Vulnerability
• CVE-2021-1870unknownApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
• CVE-2021-1871unknownApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
• CVE-2021-1879unknownApple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
• CVE-2021-1905unknownQualcomm Multiple Chipsets Use-After-Free Vulnerability
• CVE-2021-1906unknownQualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
• CVE-2021-20016criticalCVE-2021-20016 updated by NVD
• CVE-2021-20021criticalCVE-2021-20021 updated by NVD
• CVE-2021-20022highCVE-2021-20022 updated by NVD
• CVE-2021-20023mediumCVE-2021-20023 updated by NVD
• CVE-2021-20090unknownArcadyan Buffalo Firmware Path Traversal Vulnerability
• CVE-2020-14871unknownOracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
• CVE-2020-14882unknownOracle WebLogic Server Remote Code Execution Vulnerability
• CVE-2020-14883unknownOracle WebLogic Server Unspecified Vulnerability
• CVE-2019-17558unknownApache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
• CVE-2020-15505unknownIvanti MobileIron Multiple Products Remote Code Execution Vulnerability
• CVE-2021-21017unknownAdobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
• CVE-2021-21148unknownGoogle Chromium V8 Heap Buffer Overflow Vulnerability
• CVE-2021-21166unknownGoogle Chromium Race Condition Vulnerability
• CVE-2021-21193unknownGoogle Chromium Blink Use-After-Free Vulnerability
• CVE-2021-21206unknownGoogle Chromium Blink Use-After-Free Vulnerability
• CVE-2021-21220unknownGoogle Chromium V8 Improper Input Validation Vulnerability
• CVE-2021-21224unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2019-0859unknownMicrosoft Win32k Privilege Escalation Vulnerability
• CVE-2019-0863unknownMicrosoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
• CVE-2019-4716unknownIBM Planning Analytics Remote Code Execution Vulnerability
• CVE-2019-18187unknownTrend Micro OfficeScan Directory Traversal Vulnerability
• CVE-2021-40444highCVE-2021-40444 updated by NVD
• CVE-2021-40539unknownZoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
• CVE-2019-18935unknownProgress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
• CVE-2019-18988unknownTeamViewer Desktop Bypass Remote Login Vulnerability
• CVE-2021-21972criticalCVE-2021-21972 updated by NVD
• CVE-2020-15999unknownGoogle Chrome FreeType Heap Buffer Overflow Vulnerability
• CVE-2021-21985criticalCVE-2021-21985 updated by NVD
• CVE-2021-22005unknownVMware vCenter Server File Upload Vulnerability
• CVE-2021-22205criticalCVE-2021-22205 updated by NVD
• CVE-2021-22502unknownMicro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
• CVE-2021-22506unknownMicro Focus Access Manager Information Leakage Vulnerability
• CVE-2021-41773unknownApache HTTP Server Path Traversal Vulnerability
• CVE-2020-16009unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2020-16010unknownGoogle Chrome for Android UI Heap Buffer Overflow Vulnerability
• CVE-2021-22893criticalCVE-2021-22893 updated by NVD
• CVE-2021-42013unknownApache HTTP Server Path Traversal Vulnerability
• CVE-2021-22894unknownIvanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
• CVE-2020-16013unknownGoogle Chromium V8 Incorrect Implementation Vulnerabililty
• CVE-2020-16017unknownGoogle Chrome Use-After-Free Vulnerability
• CVE-2021-22899unknownIvanti Pulse Connect Secure Command Injection Vulnerability
• CVE-2021-22900unknownIvanti Pulse Connect Secure Unrestricted File Upload Vulnerability
• CVE-2021-42258unknownBQE BillQuick Web Suite SQL Injection Vulnerability
• CVE-2020-16846unknownSaltStack Salt Shell Injection Vulnerability
• CVE-2020-17087unknownMicrosoft Windows Kernel Privilege Escalation Vulnerability
• CVE-2020-17144unknownMicrosoft Exchange Server Remote Code Execution Vulnerability
• CVE-2020-17496unknownvBulletin PHP Module Remote Code Execution Vulnerability
• CVE-2021-22986unknownF5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
• CVE-2019-5544unknownVMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
• CVE-2019-5591mediumCVE-2019-5591 updated by NVD
• CVE-2020-17530unknownApache Struts Remote Code Execution Vulnerability
• CVE-2021-23874unknownMcAfee Total Protection (MTP) Improper Privilege Management Vulnerability
• CVE-2019-6223unknownApple iOS and macOS Group Facetime Vulnerability
• CVE-2021-26084unknownAtlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
• CVE-2021-26411highCVE-2021-26411 updated by NVD
• CVE-2020-24557unknownTrend Micro Multiple Products Improper Access Control Vulnerability
• CVE-2020-25213unknownWordPress File Manager Plugin Remote Code Execution Vulnerability
• CVE-2020-25506unknownD-Link DNS-320 Device Command Injection Vulnerability
• CVE-2021-26855criticalCVE-2021-26855 updated by NVD
• CVE-2021-26857highCVE-2021-26857 updated by NVD
• CVE-2021-26858highCVE-2021-26858 updated by NVD
• CVE-2020-2555unknownOracle Multiple Products Remote Code Execution Vulnerability
• CVE-2019-19356unknownNetis WF2419 Devices Remote Code Execution Vulnerability
• CVE-2019-7481highCVE-2019-7481 updated by NVD
• CVE-2019-8394unknownZoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
• CVE-2020-26919unknownNetgear JGS516PE Devices Missing Function Level Access Control Vulnerability
• CVE-2019-9082unknownThinkPHP Remote Code Execution Vulnerability
• CVE-2020-27930unknownApple Multiple Products Memory Corruption Vulnerability
• CVE-2020-27932unknownApple Multiple Products Type Confusion Vulnerability
• CVE-2020-27950unknownApple Multiple Products Memory Initialization Vulnerability
• CVE-2016-0167unknownMicrosoft Win32k Privilege Escalation Vulnerability
• CVE-2018-0798unknownMicrosoft Office Memory Corruption Vulnerability
• CVE-2018-0802unknownMicrosoft Office Memory Corruption Vulnerability
• CVE-2017-11774unknownMicrosoft Office Outlook Security Feature Bypass Vulnerability
• CVE-2018-20062unknownThinkPHP "noneCms" Remote Code Execution Vulnerability
• CVE-2016-3643unknownSolarWinds Virtualization Manager Privilege Escalation Vulnerability
• CVE-2016-3976unknownSAP NetWeaver Directory Traversal Vulnerability
• CVE-2016-9563unknownSAP NetWeaver XML External Entity (XXE) Vulnerability
• CVE-2018-2380unknownSAP Customer Relationship Management (CRM) Path Traversal Vulnerability
• CVE-2012-0158unknownMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability
• CVE-2016-3718unknownImageMagick Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2017-16651unknownRoundcube Webmail File Disclosure Vulnerability
• CVE-2010-5326unknownSAP NetWeaver Remote Code Execution Vulnerability
• CVE-2016-3715unknownImageMagick Arbitrary File Deletion Vulnerability
• CVE-2018-14558unknownTenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
• CVE-2015-4852unknownOracle WebLogic Server Deserialization of Untrusted Data Vulnerability
• CVE-2017-9822unknownDotNetNuke (DNN) Remote Code Execution Vulnerability
• CVE-2016-7255highCVE-2016-7255 updated by NVD
• CVE-2017-9805unknownApache Struts Deserialization of Untrusted Data Vulnerability
• CVE-2017-9248unknownProgress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
• CVE-2017-7269unknownMicrosoft Windows Server Buffer Overflow Vulnerability
• CVE-2016-4437unknownApache Shiro Code Execution Vulnerability
• CVE-2018-0296highCVE-2018-0296 updated by NVD
• CVE-2017-0199unknownMicrosoft Office and WordPad Remote Code Execution Vulnerability
• CVE-2012-3152unknownOracle Fusion Middleware Unspecified Vulnerability
• CVE-2018-18325unknownDotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
• CVE-2014-1812unknownMicrosoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
• CVE-2017-5638unknownApache Struts Remote Code Execution Vulnerability
• CVE-2018-13379unknownFortinet FortiOS SSL VPN Path Traversal Vulnerability
• CVE-2017-0143unknownMicrosoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
• CVE-2016-3235unknownMicrosoft Office OLE DLL Side Loading Vulnerability
• CVE-2018-0171unknownCisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
• CVE-2017-8759unknownMicrosoft .NET Framework Remote Code Execution Vulnerability
• CVE-2018-11776unknownApache Struts Remote Code Execution Vulnerability
• CVE-2017-6327unknownSymantec Messaging Gateway Remote Code Execution Vulnerability
• CVE-2016-0185unknownMicrosoft Windows Media Center Remote Code Execution Vulnerability
• CVE-2018-15961unknownAdobe ColdFusion Unrestricted File Upload Vulnerability
• CVE-2017-11882unknownMicrosoft Office Memory Corruption Vulnerability
• CVE-2018-15811unknownDotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
• CVE-2015-1641unknownMicrosoft Office Memory Corruption Vulnerability
• CVE-2020-13935highCVE-2020-13935 updated by NVD
• CVE-2024-1728criticalGradio allows users to access arbitrary files
• CVE-2024-32651criticalchangedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
• CVE-2024-56325criticalApache Pinot Vulnerable to Authentication Bypass
• CVE-2018-10931criticalCobbler has Exposed Dangerous Method or Function
• CVE-2020-9484highCVE-2020-9484 updated by NVD
• CVE-2024-38819highSpring Framework Path Traversal vulnerability
• CVE-2026-53435highCVE-2026-53435 updated by NVD
• CVE-2025-68664criticalCVE-2025-68664 updated by NVD
• CVE-2025-27520criticalBentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
• CVE-2026-27966criticalLangflow has Remote Code Execution in CSV Agent
• CVE-2019-19576criticalRemote code execution in verot/class.upload.php
• CVE-2024-7959highWithdrawn Advisory: Open WebUI has SSRF in /openai/models
• CVE-2021-25122highCVE-2021-25122 updated by NVD
• CVE-2024-21626highCVE-2024-21626 updated by NVD
• CVE-2025-61686criticalReact Router has Path Traversal in File Session Storage
• CVE-2025-54381criticalBentoML SSRF Vulnerability in File Upload Processing
• CVE-2018-1000226criticalCobbler Improper Validation of Security Tokens
• CVE-2015-3221mediumOpenStack Neutron Improper Input Validation vulnerability
• CVE-2023-22884criticalCommand Injection in Apache Airflow and Apache Airflow MySQL Provider
• CVE-2026-34040highMoby has AuthZ plugin bypass when provided oversized request bodies
• CVE-2026-27483highMindsDB: Path Traversal in /api/files Leading to Remote Code Execution
• CVE-2024-11392highDeserialization of Untrusted Data in Hugging Face Transformers
• CVE-2026-38360criticaldash-uploader has a directory traversal vulnerability
• CVE-2017-1000469criticalCobbler vulnerable to arbitrary code execution
• CVE-2020-16845highWithdrawn Advisory: Infinite loop in xz
• CVE-2026-26190criticalMilvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
• CVE-2025-71334criticalCVE-2025-71334 updated by NVD
• CVE-2020-7624criticalWithdrawn Advisory: OS Command Injection in effect
• CVE-2019-19634criticalclass.upload.php in verot.net omits .pht from the set of dangerous file extensions
• CVE-2026-50229mediumCVE-2026-50229 updated by NVD
• CVE-2022-40189criticalOS Command Injection in Apache Airflow
• CVE-2024-47533criticalcobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
• CVE-2022-38649criticalOS Command Injection in Apache Airflow
• CVE-2022-46421criticalApache Airflow Hive Provider vulnerable to Command Injection
• CVE-2026-18963criticalCVE-2026-18963 updated by NVD
• CVE-2026-59865criticalCVE-2026-59865 updated by NVD
• CVE-2025-59342mediumesm.sh has arbitrary file write via path traversal in `X-Zone-Id` header
• CVE-2020-36326criticalObject injection in PHPMailer/PHPMailer
• CVE-2024-11393highDeserialization of Untrusted Data in Hugging Face Transformers
• CVE-2026-55957highCVE-2026-55957 updated by NVD
• CVE-2023-35797criticalApache Airflow Hive Provider Beeline remote code execution with Principal
• CVE-2023-28706criticalApache Airflow Hive Provider vulnerable to code injection
• CVE-2026-31843criticalCVE-2026-31843 updated by NVD
• CVE-2026-110644criticalCVE-2026-110644 updated by NVD
• CVE-2023-46589highApache Tomcat Improper Input Validation vulnerability
• CVE-2026-56265criticalCrawl4AI: authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API ser
• CVE-2020-36939highCVE-2020-36939 updated by NVD
• CVE-2026-21531criticalAzure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
• CVE-2026-61447criticalCVE-2026-61447 updated by NVD
• CVE-2024-7034mediumWithdrawn Advisory: Open WebUI Allows Arbitrary File Write via the `/models/upload` Endpoint
• CVE-2024-11394highDeserialization of Untrusted Data in Hugging Face Transformers
• CVE-2026-40047criticalCVE-2026-40047 updated by NVD
• CVE-2026-55584highCVE-2026-55584 updated by NVD
• CVE-2018-1000164highGunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
• CVE-2026-61459criticalCVE-2026-61459 updated by NVD
• CVE-2026-110634criticalCVE-2026-110634 updated by NVD
• CVE-2025-9784highCVE-2025-9784 updated by NVD
• CVE-2025-59340criticaljinjava has Sandbox Bypass via JavaType-Based Deserialization
• CVE-2024-7387criticalCVE-2024-7387 updated by NVD
• CVE-2022-39135criticalApache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack
• CVE-2024-43202criticalApache Dolphinscheduler Code Injection vulnerability
• CVE-2016-8638criticalSession Fixation in ipsilon
• CVE-2026-14802mediumreact-dev-utils openBrowser permits command injection on macOS
• CVE-2022-24840criticalPath Traversal in django-s3file
• CVE-2023-25696criticalApache Airflow Hive Provider Improper Input Validation vulnerability
• CVE-2026-59867highCVE-2026-59867 updated by NVD
• CVE-2026-5059criticalaws-mcp has a Command Injection Remote Code Execution Vulnerability
• CVE-2026-72923highCVE-2026-72923 updated by NVD
• CVE-2023-25693criticalApache Airflow Sqoop Provider Improper Input Validation vulnerability
• CVE-2026-40453criticalCVE-2026-40453 updated by NVD
• CVE-2021-3563criticalOpenstack Keystone Incorrect Authorization vulnerability
• CVE-2026-67325highCVE-2026-67325 updated by NVD
• CVE-2024-8502criticalAgentScope Deserialization Vulnerability
• CVE-2025-13465mediumCVE-2025-13465 updated by NVD
• CVE-2024-2195criticalAim Web API vulnerable to Remote Code Execution
• CVE-2020-10571criticalPotential buffer overflow in psd-tools
• CVE-2024-38821criticalSpring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
• CVE-2026-66066criticalCVE-2026-66066 updated by NVD
• CVE-2023-32321criticalCkan remote code execution and private information access via crafted resource ids
• CVE-2026-33264criticalCVE-2026-33264 updated by NVD
• CVE-2026-56379criticalCVE-2026-56379 updated by NVD
• CVE-2025-59341highesm.sh has File Inclusion issue
• CVE-2026-47323criticalCVE-2026-47323 updated by NVD
• CVE-2023-25691criticalApache Airflow Google Provider Improper Input Validation vulnerability
• CVE-2025-58438criticalinternetarchive Vulnerable to Directory Traversal in File.download()
• CVE-2024-10553criticalH2O Deserialization of Untrusted Data Vulnerability
• CVE-2024-11042criticalInvokeAI Arbitrary File Deletion vulnerability
• CVE-2026-41293criticalCVE-2026-41293 updated by NVD
• CVE-2026-32203highCVE-2026-32203 updated by NVD
• CVE-2026-55797highCVE-2026-55797 updated by NVD
• CVE-2026-33626highCVE-2026-33626 updated by NVD
• CVE-2024-2912criticalInsecure deserialization in BentoML
• CVE-2023-39533highCVE-2023-39533 updated by NVD
• CVE-2026-69085criticalCVE-2026-69085 updated by NVD
• CVE-2026-73851mediumCVE-2026-73851 updated by NVD
• CVE-2026-59861highCVE-2026-59861 updated by NVD
• CVE-2026-34036mediumCVE-2026-34036 updated by NVD
• CVE-2021-39177highUser impersonation due to incorrect handling of the login JWT
• CVE-2026-56121criticalCVE-2026-56121 updated by NVD
• CVE-2022-31573criticalChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
• CVE-2026-67260highCVE-2026-67260 updated by NVD
• CVE-2024-46946criticalLangChain Experimental Eval Injection vulnerability
• CVE-2021-4171criticalcalibre-web is vulnerable to Business Logic Errors
• CVE-2022-23327highDenial of Service in Go-Ethereum
• CVE-2026-59866criticalCVE-2026-59866 updated by NVD
• CVE-2026-112942highCVE-2026-112942 updated by NVD
• CVE-2026-27641criticalFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
• CVE-2022-23064highsnipe-IT vulnerable to host header injection
• CVE-2022-0766criticalServer-Side Request Forgery in calibreweb
• CVE-2024-10902criticalDB-GPT vulnerable to Arbitrary File Upload with Path Traversal
• CVE-2024-11958criticalLlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection
• CVE-2026-28672criticalCVE-2026-28672 updated by NVD
• CVE-2026-44939criticalCVE-2026-44939 updated by NVD
• CVE-2026-59864criticalCVE-2026-59864 updated by NVD
• CVE-2026-26318highCommand Injection via Unsanitized `locate` Output in `versions()` — systeminformation
• CVE-2026-70035highCVE-2026-70035 updated by NVD
• CVE-2026-83520highCVE-2026-83520 updated by NVD
• CVE-2022-0577mediumIncorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
• CVE-2024-29296mediumPortainer CE allows username enumeration through authentication response timing
• CVE-2026-50524highCVE-2026-50524 updated by NVD
• CVE-2026-61539criticalCVE-2026-61539 updated by NVD
• CVE-2026-40860criticalCVE-2026-40860 updated by NVD
• CVE-2026-61732criticalCVE-2026-61732 updated by NVD
• CVE-2026-105795lowCVE-2026-105795 updated by NVD
• CVE-2026-79657criticalCVE-2026-79657 updated by NVD
• CVE-2026-2332highCVE-2026-2332 updated by NVD
• CVE-2021-34532mediumCVE-2021-34532 updated by NVD
• CVE-2022-30765criticalSQL injection in calibreweb
• CVE-2026-82533criticalCVE-2026-82533 updated by NVD
• CVE-2024-23730criticalUnsafe yaml deserialization in llama-hub
• CVE-2025-58367criticalCVE-2025-58367 updated by NVD
• CVE-2026-24781criticalCVE-2026-24781 updated by NVD
• CVE-2024-10835criticalDB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
• CVE-2026-50651highCVE-2026-50651 updated by NVD
• CVE-2026-57108highCVE-2026-57108 updated by NVD
• CVE-2025-67895criticalApache Airflow Providers Edge3 exposes internal API allowing RCE in web server context
• CVE-2026-67587highCVE-2026-67587 updated by NVD
• CVE-2025-9566highCVE-2025-9566 updated by NVD
• CVE-2025-71338criticalCVE-2025-71338 updated by NVD
• CVE-2026-48746criticalCVE-2026-48746 updated by NVD
• CVE-2024-3955criticalCraftBeerPi 4 allows arbitrary code execution
• CVE-2025-71336criticalCVE-2025-71336 updated by NVD
• CVE-2026-56315criticalPickleScan has multiple stdlib modules with direct RCE not in blocklist
• CVE-2026-53710criticalCVE-2026-53710 updated by NVD
• CVE-2026-62898highCVE-2026-62898 updated by NVD
• CVE-2021-32822mediumhbs: Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive
• CVE-2024-7033mediumWithdrawn Advisory: Open WebUI Allows Arbitrary File Write via the `download_model` Endpoint
• CVE-2024-10190criticalHorovod Vulnerable to Command Injection
• CVE-2026-59863highCVE-2026-59863 updated by NVD
• CVE-2024-11831mediumCVE-2024-11831 updated by NVD
• CVE-2023-1370highjson-smart Uncontrolled Recursion vulnerability
• CVE-2026-50632highCVE-2026-50632 updated by NVD
• CVE-2026-15830mediumCVE-2026-15830 updated by NVD
• CVE-2022-39366criticalacryl-datahub missing JWT signature check
• CVE-2026-69084criticalCVE-2026-69084 updated by NVD
• CVE-2026-69651highCVE-2026-69651 updated by NVD
• CVE-2026-58280highCVE-2026-58280 updated by NVD
• CVE-2026-52815mediumGogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API
• CVE-2024-10901criticalDB-GPT Arbitrary File Write vulnerability
• CVE-2026-15307highCVE-2026-15307 updated by NVD
• CVE-2026-94545mediumCVE-2026-94545 updated by NVD
• CVE-2026-62901highCVE-2026-62901 updated by NVD
• CVE-2026-86439highCVE-2026-86439 updated by NVD
• CVE-2026-18948criticalCVE-2026-18948 updated by NVD
• CVE-2026-7873criticalCVE-2026-7873 updated by NVD
• CVE-2026-67434highCVE-2026-67434 updated by NVD
• CVE-2026-75604criticalCVE-2026-75604 updated by NVD
• CVE-2026-55175highCVE-2026-55175 updated by NVD
• CVE-2026-53598highCVE-2026-53598 updated by NVD
• CVE-2026-11572highCVE-2026-11572 updated by NVD
• CVE-2026-96236highCVE-2026-96236 updated by NVD
• CVE-2026-70181highCVE-2026-70181 updated by NVD
• CVE-2026-70159highCVE-2026-70159 updated by NVD
• CVE-2026-0603highCVE-2026-0603 updated by NVD
• CVE-2026-40176highCVE-2026-40176 updated by NVD
• CVE-2026-8505criticalCVE-2026-8505 updated by NVD
• CVE-2024-8537criticalAgentScope path traversal vulnerability
• CVE-2026-67323highCVE-2026-67323 updated by NVD
• CVE-2024-42467criticalCVE-2024-42467 updated by NVD
• CVE-2026-5366criticalCVE-2026-5366 updated by NVD
• CVE-2026-33454criticalCVE-2026-33454 updated by NVD
• CVE-2026-22244highCVE-2026-22244 updated by NVD
• CVE-2026-96960highCVE-2026-96960 updated by NVD
• CVE-2026-96958highCVE-2026-96958 updated by NVD
• CVE-2026-92937criticalCVE-2026-92937 updated by NVD
• CVE-2026-52806criticalGogs vulnerable to RCE via git rebase --exec argument injection in pull request merge
• CVE-2026-45829criticalCVE-2026-45829 updated by NVD
• CVE-2024-8551criticalAgentScope path traversal vulnerability in save-workflow
• CVE-2026-59862highCVE-2026-59862 updated by NVD
• CVE-2026-12773mediumCVE-2026-12773 updated by NVD
• CVE-2026-59859highCVE-2026-59859 updated by NVD
• CVE-2026-59860highCVE-2026-59860 updated by NVD
• CVE-2026-44795highCVE-2026-44795 updated by NVD
• CVE-2023-6484mediumKeycloak vulnerable to log Injection during WebAuthn authentication or registration
• CVE-2026-105794criticalCVE-2026-105794 updated by NVD
• CVE-2026-0847highNLTK has a Path Traversal issue
• CVE-2026-67438mediumCVE-2026-67438 updated by NVD
• CVE-2026-49297highCVE-2026-49297 updated by NVD
• CVE-2026-46619criticalCVE-2026-46619 updated by NVD
• CVE-2026-115893criticalCVE-2026-115893 updated by NVD
• CVE-2026-33228highCVE-2026-33228 updated by NVD
• CVE-2026-105016criticalCVE-2026-105016 updated by NVD
• CVE-2022-0767criticalServer-Side Request Forgery in calibreweb
• CVE-2026-43865highCVE-2026-43865 updated by NVD
• CVE-2026-43003highCVE-2026-43003 updated by NVD
• CVE-2026-62815criticalCVE-2026-62815 updated by NVD
• CVE-2024-47081mediumRequests vulnerable to .netrc credentials leak via malicious URLs
• CVE-2026-45140criticalCVE-2026-45140 updated by NVD
• CVE-2026-50646highCVE-2026-50646 updated by NVD
• CVE-2026-73487criticalCVE-2026-73487 updated by NVD
• CVE-2026-44007criticalCVE-2026-44007 updated by NVD
• CVE-2024-3098criticalllama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution
• CVE-2026-54892highCVE-2026-54892 updated by NVD
• CVE-2026-84218highCVE-2026-84218 updated by NVD
• CVE-2026-84452highCVE-2026-84452 updated by NVD
• CVE-2024-5023criticalConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
• CVE-2026-49119highCVE-2026-49119 updated by NVD
• CVE-2026-33701criticalCVE-2026-33701 updated by NVD
• CVE-2024-9070criticalBentoML deserialization vulnerability
• CVE-2024-8769criticalAim path traversal in LockManager.release_locks
• CVE-2026-43867criticalCVE-2026-43867 updated by NVD
• CVE-2024-58351criticalCVE-2024-58351 updated by NVD
• CVE-2026-58076highCVE-2026-58076 updated by NVD
• CVE-2025-4318criticalCVE-2025-4318 updated by NVD
• CVE-2026-57281highCVE-2026-57281 updated by NVD
• CVE-2026-52813criticalGogs has Path Traversal in organization name that results in RCE through Git hooks
• CVE-2026-47429criticalCVE-2026-47429 updated by NVD
• CVE-2025-6544criticalCVE-2025-6544 updated by NVD
• CVE-2025-32428criticalTigerVNC accessible via the network and not just via a UNIX socket as intended
• CVE-2026-41523highCVE-2026-41523 updated by NVD
• CVE-2026-68770criticalCVE-2026-68770 updated by NVD