Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-45249 | not reported | — | Listed | Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords. | — |
| CVE-2024-37085 | not reported | — | Listed | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain fu... | — |
| CVE-2018-0824 | not reported | — | Listed | Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code ex... | — |
| CVE-2024-36971 | not reported | — | Listed | Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kerne... | — |
| CVE-2024-32113 | not reported | — | Listed | Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution. | — |
| CVE-2024-38189 | not reported | — | Listed | Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file. | — |
| CVE-2024-38178 | not reported | — | Listed | Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code e... | — |
| CVE-2024-38213 | not reported | — | Listed | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experi... | — |
| CVE-2024-38193 | not reported | — | Listed | Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling... | — |
| CVE-2024-38106 | not reported | — | Listed | Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTE... | — |
| CVE-2024-38107 | not reported | — | Listed | Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local... | — |
| CVE-2024-28986 | not reported | — | Listed | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution. | — |
| CVE-2024-23897 | not reported | — | Listed | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, whi... | — |
| CVE-2021-33044 | not reported | — | Listed | Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the... | — |
| CVE-2021-33045 | not reported | — | Listed | Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client dur... | — |
| CVE-2022-0185 | not reported | — | Listed | Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality.... | — |
| CVE-2021-31196 | not reported | — | Listed | Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. | — |
| CVE-2024-39717 | not reported | — | Listed | The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Da... | — |
| CVE-2024-7971 | not reported | — | Listed | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page.... | — |
| CVE-2024-38856 | not reported | — | Listed | Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of... | — |