Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-21333 | not reported | — | Listed | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain... | — |
| CVE-2025-21334 | not reported | — | Listed | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM priv... | — |
| CVE-2024-50603 | not reported | — | Listed | Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. S... | — |
| CVE-2020-11023 | not reported | — | Listed | JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tag... | — |
| CVE-2025-24085 | not reported | — | Listed | Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privi... | — |
| CVE-2024-45195 | not reported | — | Listed | Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access. | — |
| CVE-2024-29059 | not reported | — | Listed | Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling re... | — |
| CVE-2018-9276 | not reported | — | Listed | Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execu... | — |
| CVE-2018-19410 | not reported | — | Listed | Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users w... | — |
| CVE-2024-53104 | not reported | — | Listed | Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that cou... | — |
| CVE-2025-0411 | not reported | — | Listed | 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to e... | — |
| CVE-2022-23748 | not reported | — | Listed | Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker... | — |
| CVE-2024-21413 | not reported | — | Listed | Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this... | — |
| CVE-2020-29574 | not reported | — | Listed | CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL st... | — |
| CVE-2020-15069 | not reported | — | Listed | Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature. | — |
| CVE-2025-0994 | not reported | — | Listed | Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack... | — |
| CVE-2025-21418 | not reported | — | Listed | Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escala... | — |
| CVE-2024-40890 | not reported | — | Listed | Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenti... | — |
| CVE-2024-40891 | not reported | — | Listed | Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an... | — |
| CVE-2024-41710 | not reported | — | Listed | Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability... | — |