Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-4978 | not reported | — | Listed | Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4a... | — |
| CVE-2024-24919 | not reported | — | Listed | Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an a... | — |
| CVE-2024-1086 | not reported | — | Listed | Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privileg... | — |
| CVE-2017-3506 | not reported | — | Listed | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker... | — |
| CVE-2024-4610 | not reported | — | Listed | Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper... | — |
| CVE-2024-4577 | not reported | — | Listed | PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code executio... | — |
| CVE-2024-32896 | not reported | — | Listed | Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. | — |
| CVE-2024-26169 | not reported | — | Listed | Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user per... | — |
| CVE-2024-4358 | not reported | — | Listed | Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized acc... | — |
| CVE-2022-24816 | not reported | — | Listed | OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via... | — |
| CVE-2020-13965 | not reported | — | Listed | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML a... | — |
| CVE-2024-20399 | not reported | — | Listed | Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker... | — |
| CVE-2024-38112 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability. | — |
| CVE-2024-38080 | not reported | — | Listed | Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM pr... | — |
| CVE-2024-23692 | not reported | — | Listed | Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remo... | — |
| CVE-2024-36401 | not reported | — | Listed | OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evalu... | — |
| CVE-2024-34102 | not reported | — | Listed | Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for... | — |
| CVE-2024-28995 | not reported | — | Listed | SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine. | — |
| CVE-2022-22948 | not reported | — | Listed | VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access... | — |
| CVE-2012-4792 | not reported | — | Listed | Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted we... | — |