Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-11001 | not reported | — | Listed | Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulner... | — |
| CVE-2021-40407 | not reported | — | Listed | Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality. | — |
| CVE-2024-12356 | not reported | — | Listed | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthentic... | — |
| CVE-2021-44207 | not reported | — | Listed | Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on th... | — |
| CVE-2024-3393 | not reported | — | Listed | Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when explo... | — |
| CVE-2024-41713 | not reported | — | Listed | Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vu... | — |
| CVE-2024-55550 | not reported | — | Listed | Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read loc... | — |
| CVE-2020-2883 | not reported | — | Listed | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticate... | — |
| CVE-2024-12686 | not reported | — | Listed | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an... | — |
| CVE-2023-48365 | not reported | — | Listed | Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend... | — |
| CVE-2024-55591 | not reported | — | Listed | Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain su... | — |
| CVE-2025-21333 | not reported | — | Listed | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain... | — |
| CVE-2025-21334 | not reported | — | Listed | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM priv... | — |
| CVE-2024-50603 | not reported | — | Listed | Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. S... | — |
| CVE-2020-11023 | not reported | — | Listed | JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tag... | — |
| CVE-2025-24085 | not reported | — | Listed | Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privi... | — |
| CVE-2024-45195 | not reported | — | Listed | Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access. | — |
| CVE-2024-29059 | not reported | — | Listed | Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling re... | — |
| CVE-2018-9276 | not reported | — | Listed | Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execu... | — |
| CVE-2018-19410 | not reported | — | Listed | Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users w... | — |