Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-36401 | not reported | — | Listed | OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evalu... | — |
| CVE-2024-34102 | not reported | — | Listed | Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for... | — |
| CVE-2024-28995 | not reported | — | Listed | SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine. | — |
| CVE-2022-22948 | not reported | — | Listed | VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access... | — |
| CVE-2012-4792 | not reported | — | Listed | Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted we... | — |
| CVE-2024-39891 | not reported | — | Listed | Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request contain... | — |
| CVE-2024-4879 | not reported | — | Listed | ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauth... | — |
| CVE-2024-5217 | not reported | — | Listed | ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the... | — |
| CVE-2023-45249 | not reported | — | Listed | Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords. | — |
| CVE-2024-37085 | not reported | — | Listed | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain fu... | — |
| CVE-2018-0824 | not reported | — | Listed | Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code ex... | — |
| CVE-2024-36971 | not reported | — | Listed | Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kerne... | — |
| CVE-2024-32113 | not reported | — | Listed | Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution. | — |
| CVE-2024-38189 | not reported | — | Listed | Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file. | — |
| CVE-2024-38178 | not reported | — | Listed | Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code e... | — |
| CVE-2024-38213 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experi... | — |
| CVE-2024-38193 | not reported | — | Listed | Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling... | — |
| CVE-2024-38106 | not reported | — | Listed | Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTE... | — |
| CVE-2024-38107 | not reported | — | Listed | Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local... | — |
| CVE-2024-28986 | not reported | — | Listed | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution. | — |