Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-13159 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensit... | — |
| CVE-2024-13160 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensit... | — |
| CVE-2024-13161 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensit... | — |
| CVE-2025-24983 | not reported | — | Listed | Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges lo... | — |
| CVE-2025-24984 | not reported | — | Listed | Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows a... | — |
| CVE-2025-24985 | not reported | — | Listed | Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker... | — |
| CVE-2025-24991 | not reported | — | Listed | Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to discl... | — |
| CVE-2025-24201 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted... | — |
| CVE-2025-24472 | not reported | — | Listed | Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges... | — |
| CVE-2025-1316 | not reported | — | Listed | Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achiev... | — |
| CVE-2017-12637 | not reported | — | Listed | SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScript... | — |
| CVE-2025-30154 | not reported | — | Listed | reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to Github Actions Workflow... | — |
| CVE-2019-9874 | not reported | — | Listed | Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an un... | — |
| CVE-2019-9875 | not reported | — | Listed | Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an au... | — |
| CVE-2025-2783 | not reported | — | Listed | Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle bein... | — |
| CVE-2024-20439 | not reported | — | Listed | Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an aff... | — |
| CVE-2025-24813 | not reported | — | Listed | Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malic... | — |
| CVE-2025-22457 | not reported | — | Listed | Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthentic... | — |
| CVE-2025-31161 | not reported | — | Listed | CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header that allows a remote unauthenticated attacker to a... | — |
| CVE-2025-30406 | not reported | — | Listed | Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys u... | — |