Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-21351 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experi... | — |
| CVE-2024-21412 | not reported | — | Listed | Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. | — |
| CVE-2024-21410 | not reported | — | Listed | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2020-3259 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker coul... | — |
| CVE-2024-1709 | not reported | — | Listed | ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management inte... | — |
| CVE-2023-29360 | not reported | — | Listed | Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local a... | — |
| CVE-2024-21338 | not reported | — | Listed | Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control... | — |
| CVE-2021-36380 | not reported | — | Listed | Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device... | — |
| CVE-2023-21237 | not reported | — | Listed | Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide... | — |
| CVE-2024-23296 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel re... | — |
| CVE-2024-23225 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrar... | — |
| CVE-2024-27198 | not reported | — | Listed | JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. | — |
| CVE-2023-48788 | not reported | — | Listed | Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via sp... | — |
| CVE-2021-44529 | not reported | — | Listed | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to exe... | — |
| CVE-2019-7256 | not reported | — | Listed | Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution. | — |
| CVE-2023-24955 | not reported | — | Listed | Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to exec... | — |
| CVE-2024-29745 | not reported | — | Listed | Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking aff... | — |
| CVE-2024-29748 | not reported | — | Listed | Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin... | — |
| CVE-2024-3272 | not reported | — | Listed | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command i... | — |
| CVE-2024-3273 | not reported | — | Listed | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead... | — |