Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2024-30088 not reported — Listed Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escala... —
CVE-2024-9680 not reported — Listed Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content... —
CVE-2024-28987 not reported — Listed SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal fu... —
CVE-2024-40711 not reported — Listed Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. —
CVE-2024-9537 not reported — Listed ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component. —
CVE-2024-38094 not reported — Listed Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. —
CVE-2024-47575 not reported — Listed Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to... —
CVE-2024-20481 not reported — Listed Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vu... —
CVE-2024-37383 not reported — Listed RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacke... —
CVE-2024-8957 not reported — Listed PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privi... —
CVE-2024-8956 not reported — Listed PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass au... —
CVE-2024-5910 not reported — Listed Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Exp... —
CVE-2024-43093 not reported — Listed Android Framework contains an unspecified vulnerability that allows for privilege escalation. —
CVE-2024-51567 not reported — Listed CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as roo... —
CVE-2019-16278 not reported — Listed Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remo... —
CVE-2024-49039 not reported — Listed Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to esc... —
CVE-2024-43451 not reported — Listed Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a f... —
CVE-2014-2120 not reported — Listed Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability all... —
CVE-2021-26086 not reported — Listed Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /... —
CVE-2024-9463 not reported — Listed Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS com... —