Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-3393 | not reported | — | Listed | Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when explo... | — |
| CVE-2024-41713 | not reported | — | Listed | Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vu... | — |
| CVE-2024-55550 | not reported | — | Listed | Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read loc... | — |
| CVE-2020-2883 | not reported | — | Listed | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticate... | — |
| CVE-2024-12686 | not reported | — | Listed | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an... | — |
| CVE-2023-48365 | not reported | — | Listed | Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend... | — |
| CVE-2024-55591 | not reported | — | Listed | Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain su... | — |
| CVE-2025-21333 | not reported | — | Listed | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain... | — |
| CVE-2025-21334 | not reported | — | Listed | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM priv... | — |
| CVE-2024-50603 | not reported | — | Listed | Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. S... | — |
| CVE-2020-11023 | not reported | — | Listed | JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tag... | — |
| CVE-2025-24085 | not reported | — | Listed | Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privi... | — |
| CVE-2024-45195 | not reported | — | Listed | Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access. | — |
| CVE-2024-29059 | not reported | — | Listed | Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling re... | — |
| CVE-2018-9276 | not reported | — | Listed | Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execu... | — |
| CVE-2018-19410 | not reported | — | Listed | Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users w... | — |
| CVE-2024-53104 | not reported | — | Listed | Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that cou... | — |
| CVE-2025-0411 | not reported | — | Listed | 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to e... | — |
| CVE-2022-23748 | not reported | — | Listed | Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker... | — |
| CVE-2024-21413 | not reported | — | Listed | Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this... | — |