Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-4761 | not reported | — | Listed | Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could... | — |
| CVE-2023-43208 | not reported | — | Listed | NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code exec... | — |
| CVE-2024-4947 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. | — |
| CVE-2020-17519 | not reported | — | Listed | Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobMa... | — |
| CVE-2024-5274 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulne... | — |
| CVE-2024-4978 | not reported | — | Listed | Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4a... | — |
| CVE-2024-24919 | not reported | — | Listed | Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an a... | — |
| CVE-2024-1086 | not reported | — | Listed | Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privileg... | — |
| CVE-2017-3506 | not reported | — | Listed | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker... | — |
| CVE-2024-4610 | not reported | — | Listed | Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper... | — |
| CVE-2024-4577 | not reported | — | Listed | PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code executio... | — |
| CVE-2024-32896 | not reported | — | Listed | Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. | — |
| CVE-2024-26169 | not reported | — | Listed | Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user per... | — |
| CVE-2024-4358 | not reported | — | Listed | Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized acc... | — |
| CVE-2022-24816 | not reported | — | Listed | OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via... | — |
| CVE-2020-13965 | not reported | — | Listed | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML a... | — |
| CVE-2024-20399 | not reported | — | Listed | Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker... | — |
| CVE-2024-38112 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability. | — |
| CVE-2024-38080 | not reported | — | Listed | Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM pr... | — |
| CVE-2024-23692 | not reported | — | Listed | Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remo... | — |