Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-9276 | not reported | — | Listed | Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execu... | — |
| CVE-2018-19410 | not reported | — | Listed | Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users w... | — |
| CVE-2024-53104 | not reported | — | Listed | Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that cou... | — |
| CVE-2025-0411 | not reported | — | Listed | 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to e... | — |
| CVE-2022-23748 | not reported | — | Listed | Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker... | — |
| CVE-2024-21413 | not reported | — | Listed | Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this... | — |
| CVE-2020-29574 | not reported | — | Listed | CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL st... | — |
| CVE-2020-15069 | not reported | — | Listed | Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature. | — |
| CVE-2025-0994 | not reported | — | Listed | Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack... | — |
| CVE-2025-21418 | not reported | — | Listed | Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escala... | — |
| CVE-2024-40890 | not reported | — | Listed | Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenti... | — |
| CVE-2024-40891 | not reported | — | Listed | Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an... | — |
| CVE-2024-41710 | not reported | — | Listed | Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability... | — |
| CVE-2025-24200 | not reported | — | Listed | Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a l... | — |
| CVE-2024-57727 | not reported | — | Listed | SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download... | — |
| CVE-2024-53704 | not reported | — | Listed | SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to... | — |
| CVE-2025-23209 | not reported | — | Listed | Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code... | — |
| CVE-2025-0111 | not reported | — | Listed | Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated... | — |
| CVE-2025-24989 | not reported | — | Listed | Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a ne... | — |
| CVE-2017-3066 | not reported | — | Listed | Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution. | — |