Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-3400 | not reported | — | Listed | Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execut... | — |
| CVE-2022-38028 | not reported | — | Listed | Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file... | — |
| CVE-2024-20353 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote de... | — |
| CVE-2024-20359 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local... | — |
| CVE-2024-4040 | not reported | — | Listed | CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS)... | — |
| CVE-2024-29988 | not reported | — | Listed | Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) f... | — |
| CVE-2023-7028 | not reported | — | Listed | GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset... | — |
| CVE-2024-4671 | not reported | — | Listed | Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML... | — |
| CVE-2024-30051 | not reported | — | Listed | Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges. | — |
| CVE-2024-30040 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass. | — |
| CVE-2014-100005 | not reported | — | Listed | D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by... | — |
| CVE-2021-40655 | not reported | — | Listed | D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a... | — |
| CVE-2024-4761 | not reported | — | Listed | Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could... | — |
| CVE-2023-43208 | not reported | — | Listed | NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code exec... | — |
| CVE-2024-4947 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. | — |
| CVE-2020-17519 | not reported | — | Listed | Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobMa... | — |
| CVE-2024-5274 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulne... | — |
| CVE-2024-4978 | not reported | — | Listed | Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4a... | — |
| CVE-2024-24919 | not reported | — | Listed | Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an a... | — |
| CVE-2024-1086 | not reported | — | Listed | Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privileg... | — |