Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-34192 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to... | — |
| CVE-2023-20118 | not reported | — | Listed | Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful... | — |
| CVE-2022-43939 | not reported | — | Listed | Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attack... | — |
| CVE-2022-43769 | not reported | — | Listed | Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into... | — |
| CVE-2018-8639 | not reported | — | Listed | Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege esca... | — |
| CVE-2024-4885 | not reported | — | Listed | Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution. | — |
| CVE-2025-22224 | not reported | — | Listed | VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write.... | — |
| CVE-2025-22225 | not reported | — | Listed | VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to... | — |
| CVE-2025-22226 | not reported | — | Listed | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploi... | — |
| CVE-2025-25181 | not reported | — | Listed | Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL comma... | — |
| CVE-2024-57968 | not reported | — | Listed | Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unint... | — |
| CVE-2024-13159 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensit... | — |
| CVE-2024-13160 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensit... | — |
| CVE-2024-13161 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensit... | — |
| CVE-2025-24983 | not reported | — | Listed | Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges lo... | — |
| CVE-2025-24984 | not reported | — | Listed | Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows a... | — |
| CVE-2025-24985 | not reported | — | Listed | Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker... | — |
| CVE-2025-24991 | not reported | — | Listed | Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to discl... | — |
| CVE-2025-24201 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted... | — |
| CVE-2025-24472 | not reported | — | Listed | Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges... | — |