Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-48788 | not reported | — | Listed | Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via sp... | — |
| CVE-2021-44529 | not reported | — | Listed | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to exe... | — |
| CVE-2019-7256 | not reported | — | Listed | Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution. | — |
| CVE-2023-24955 | not reported | — | Listed | Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to exec... | — |
| CVE-2024-29745 | not reported | — | Listed | Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking aff... | — |
| CVE-2024-29748 | not reported | — | Listed | Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin... | — |
| CVE-2024-3272 | not reported | — | Listed | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command i... | — |
| CVE-2024-3273 | not reported | — | Listed | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead... | — |
| CVE-2024-3400 | not reported | — | Listed | Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execut... | — |
| CVE-2022-38028 | not reported | — | Listed | Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file... | — |
| CVE-2024-20353 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote de... | — |
| CVE-2024-20359 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local... | — |
| CVE-2024-4040 | not reported | — | Listed | CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS)... | — |
| CVE-2024-29988 | not reported | — | Listed | Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) f... | — |
| CVE-2023-7028 | not reported | — | Listed | GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset... | — |
| CVE-2024-4671 | not reported | — | Listed | Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML... | — |
| CVE-2024-30051 | not reported | — | Listed | Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges. | — |
| CVE-2024-30040 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass. | — |
| CVE-2014-100005 | not reported | — | Listed | D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by... | — |
| CVE-2021-40655 | not reported | — | Listed | D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a... | — |