Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-39717 | not reported | — | Listed | The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Da... | — |
| CVE-2024-7971 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page.... | — |
| CVE-2024-38856 | not reported | — | Listed | Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of... | — |
| CVE-2024-7965 | not reported | — | Listed | Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corrupti... | — |
| CVE-2021-20123 | not reported | — | Listed | Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage... | — |
| CVE-2021-20124 | not reported | — | Listed | Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticat... | — |
| CVE-2024-7262 | not reported | — | Listed | Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrar... | — |
| CVE-2016-3714 | not reported | — | Listed | ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders... | — |
| CVE-2017-1000253 | not reported | — | Listed | Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a loca... | — |
| CVE-2024-38226 | not reported | — | Listed | Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block... | — |
| CVE-2024-38014 | not reported | — | Listed | Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges. | — |
| CVE-2024-38217 | not reported | — | Listed | Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based... | — |
| CVE-2024-8190 | not reported | — | Listed | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authen... | — |
| CVE-2024-43461 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an atta... | — |
| CVE-2024-6670 | not reported | — | Listed | Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted passwo... | — |
| CVE-2014-0497 | not reported | — | Listed | Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. | — |
| CVE-2013-0643 | not reported | — | Listed | Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute a... | — |
| CVE-2013-0648 | not reported | — | Listed | Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker t... | — |
| CVE-2014-0502 | not reported | — | Listed | Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. | — |
| CVE-2024-27348 | not reported | — | Listed | Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code. | — |