Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-23897 | not reported | — | Listed | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, whi... | — |
| CVE-2021-33044 | not reported | — | Listed | Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the... | — |
| CVE-2021-33045 | not reported | — | Listed | Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client dur... | — |
| CVE-2022-0185 | not reported | — | Listed | Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality.... | — |
| CVE-2021-31196 | not reported | — | Listed | Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. | — |
| CVE-2024-39717 | not reported | — | Listed | The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Da... | — |
| CVE-2024-7971 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page.... | — |
| CVE-2024-38856 | not reported | — | Listed | Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of... | — |
| CVE-2024-7965 | not reported | — | Listed | Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corrupti... | — |
| CVE-2021-20123 | not reported | — | Listed | Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage... | — |
| CVE-2021-20124 | not reported | — | Listed | Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticat... | — |
| CVE-2024-7262 | not reported | — | Listed | Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrar... | — |
| CVE-2016-3714 | not reported | — | Listed | ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders... | — |
| CVE-2017-1000253 | not reported | — | Listed | Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a loca... | — |
| CVE-2024-38226 | not reported | — | Listed | Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block... | — |
| CVE-2024-38014 | not reported | — | Listed | Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges. | — |
| CVE-2024-38217 | not reported | — | Listed | Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based... | — |
| CVE-2024-8190 | not reported | — | Listed | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authen... | — |
| CVE-2024-43461 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an atta... | — |
| CVE-2024-6670 | not reported | — | Listed | Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted passwo... | — |