Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-44308 | not reported | — | Listed | Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lea... | — |
| CVE-2024-44309 | not reported | — | Listed | Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lea... | — |
| CVE-2024-21287 | not reported | — | Listed | Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the... | — |
| CVE-2023-28461 | not reported | — | Listed | Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read loca... | — |
| CVE-2023-45727 | not reported | — | Listed | North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External Entity (XXE) reference vu... | — |
| CVE-2024-11680 | not reported | — | Listed | ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated attacker to enable unauthorized modifica... | — |
| CVE-2024-11667 | not reported | — | Listed | Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or... | — |
| CVE-2024-51378 | not reported | — | Listed | CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary comm... | — |
| CVE-2024-49138 | not reported | — | Listed | Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to e... | — |
| CVE-2024-20767 | not reported | — | Listed | Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an... | — |
| CVE-2024-35250 | not reported | — | Listed | Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privil... | — |
| CVE-2024-55956 | not reported | — | Listed | Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload vulnerability that could... | — |
| CVE-2018-14933 | not reported | — | Listed | NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharact... | — |
| CVE-2022-23227 | not reported | — | Listed | NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR arch... | — |
| CVE-2019-11001 | not reported | — | Listed | Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulner... | — |
| CVE-2021-40407 | not reported | — | Listed | Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality. | — |
| CVE-2024-12356 | not reported | — | Listed | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthentic... | — |
| CVE-2021-44207 | not reported | — | Listed | Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on th... | — |
| CVE-2024-3393 | not reported | — | Listed | Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when explo... | — |
| CVE-2024-41713 | not reported | — | Listed | Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vu... | — |