Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-39891 | not reported | — | Listed | Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request contain... | — |
| CVE-2024-4879 | not reported | — | Listed | ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauth... | — |
| CVE-2024-5217 | not reported | — | Listed | ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the... | — |
| CVE-2023-45249 | not reported | — | Listed | Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords. | — |
| CVE-2024-37085 | not reported | — | Listed | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain fu... | — |
| CVE-2018-0824 | not reported | — | Listed | Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code ex... | — |
| CVE-2024-36971 | not reported | — | Listed | Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kerne... | — |
| CVE-2024-32113 | not reported | — | Listed | Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution. | — |
| CVE-2024-38189 | not reported | — | Listed | Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file. | — |
| CVE-2024-38178 | not reported | — | Listed | Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code e... | — |
| CVE-2024-38213 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experi... | — |
| CVE-2024-38193 | not reported | — | Listed | Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling... | — |
| CVE-2024-38106 | not reported | — | Listed | Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTE... | — |
| CVE-2024-38107 | not reported | — | Listed | Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local... | — |
| CVE-2024-28986 | not reported | — | Listed | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution. | — |
| CVE-2024-23897 | not reported | — | Listed | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, whi... | — |
| CVE-2021-33044 | not reported | — | Listed | Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the... | — |
| CVE-2021-33045 | not reported | — | Listed | Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client dur... | — |
| CVE-2022-0185 | not reported | — | Listed | Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality.... | — |
| CVE-2021-31196 | not reported | — | Listed | Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. | — |