Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-5910 | not reported | — | Listed | Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Exp... | — |
| CVE-2024-43093 | not reported | — | Listed | Android Framework contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2024-51567 | not reported | — | Listed | CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as roo... | — |
| CVE-2019-16278 | not reported | — | Listed | Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remo... | — |
| CVE-2024-49039 | not reported | — | Listed | Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to esc... | — |
| CVE-2024-43451 | not reported | — | Listed | Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a f... | — |
| CVE-2014-2120 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability all... | — |
| CVE-2021-26086 | not reported | — | Listed | Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /... | — |
| CVE-2024-9463 | not reported | — | Listed | Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS com... | — |
| CVE-2024-9465 | not reported | — | Listed | Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database c... | — |
| CVE-2024-1212 | not reported | — | Listed | Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system... | — |
| CVE-2024-0012 | not reported | — | Listed | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products,... | — |
| CVE-2024-9474 | not reported | — | Listed | Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based manageme... | — |
| CVE-2024-38812 | not reported | — | Listed | VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability c... | — |
| CVE-2024-38813 | not reported | — | Listed | VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network acce... | — |
| CVE-2024-44308 | not reported | — | Listed | Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lea... | — |
| CVE-2024-44309 | not reported | — | Listed | Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lea... | — |
| CVE-2024-21287 | not reported | — | Listed | Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the... | — |
| CVE-2023-28461 | not reported | — | Listed | Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read loca... | — |
| CVE-2023-45727 | not reported | — | Listed | North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External Entity (XXE) reference vu... | — |