Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-21445 | not reported | — | Listed | Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading t... | — |
| CVE-2020-14644 | not reported | — | Listed | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers wi... | — |
| CVE-2024-8963 | not reported | — | Listed | Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access... | — |
| CVE-2024-7593 | not reported | — | Listed | Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a ch... | — |
| CVE-2023-25280 | not reported | — | Listed | D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges t... | — |
| CVE-2020-15415 | not reported | — | Listed | DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload t... | — |
| CVE-2019-0344 | not reported | — | Listed | SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virt... | — |
| CVE-2024-29824 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same... | — |
| CVE-2024-45519 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated... | — |
| CVE-2024-43047 | not reported | — | Listed | Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of... | — |
| CVE-2024-43572 | not reported | — | Listed | Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. | — |
| CVE-2024-43573 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. | — |
| CVE-2024-23113 | not reported | — | Listed | Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to... | — |
| CVE-2024-9380 | not reported | — | Listed | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authen... | — |
| CVE-2024-30088 | not reported | — | Listed | Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escala... | — |
| CVE-2024-9680 | not reported | — | Listed | Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content... | — |
| CVE-2024-28987 | not reported | — | Listed | SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal fu... | — |
| CVE-2024-40711 | not reported | — | Listed | Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. | — |
| CVE-2024-9537 | not reported | — | Listed | ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component. | — |
| CVE-2024-38094 | not reported | — | Listed | Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. | — |