Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-20122 | not reported | — | Listed | Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface... | — |
| CVE-2026-33825 | not reported | — | Listed | Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate... | — |
| CVE-2026-39987 | not reported | — | Listed | Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute a... | — |
| CVE-2024-57726 | not reported | — | Listed | SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive perm... | — |
| CVE-2024-57728 | not reported | — | Listed | SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploadin... | — |
| CVE-2025-29635 | not reported | — | Listed | D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote device... | — |
| CVE-2024-1708 | not reported | — | Listed | ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact co... | — |
| CVE-2026-45498 | not reported | — | Listed | Microsoft Defender contains an unspecified vulnerability that allows for denial of service. | — |
| CVE-2026-41091 | not reported | — | Listed | Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally. | — |
| CVE-2010-0806 | not reported | — | Listed | Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors... | — |
| CVE-2010-0249 | not reported | — | Listed | Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessin... | — |
| CVE-2009-3459 | not reported | — | Listed | Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via... | — |
| CVE-2009-1537 | not reported | — | Listed | Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could... | — |
| CVE-2008-4250 | not reported | — | Listed | Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary c... | — |
| CVE-2026-34926 | not reported | — | Listed | Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify... | — |
| CVE-2024-21182 | not reported | — | Listed | Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compr... | — |
| CVE-2025-48595 | not reported | — | Listed | Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation. | — |
| CVE-2022-0492 | not reported | — | Listed | Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent f... | — |
| CVE-2026-45247 | not reported | — | Listed | Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to ach... | — |
| CVE-2026-50751 | not reported | — | Listed | Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated rem... | — |