Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113869 | medium | 5.4 | No | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME messa... | 2026-10-27 |
| CVE-2026-110247 | high | 8.4 | No | Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message th... | 2026-10-27 |
| CVE-2026-100801 | high | 8.8 | No | Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,... | 2026-10-27 |
| CVE-2024-36345 | not reported | — | No | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out... | 2026-10-27 |
| CVE-2024-48519 | medium | 6.2 | No | Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial... | 2026-10-27 |
| CVE-2024-55045 | high | 7.3 | No | Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task_mavobc_entry function at /comm/task_... | 2026-10-27 |
| CVE-2024-51395 | medium | 6.2 | No | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a d... | 2026-10-27 |
| CVE-2024-51394 | medium | 5.5 | No | Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a d... | 2026-10-27 |
| CVE-2024-58396 | high | 7.5 | No | YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary f... | 2026-10-27 |
| CVE-2024-4412 | low | 2.7 | No | The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code... | 2026-10-27 |
| CVE-2024-4457 | critical | 9.1 | No | The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker t... | 2026-10-27 |
| CVE-2024-58397 | medium | 6.1 | No | MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations v... | 2026-10-27 |
| CVE-2024-22031 | high | 8.5 | No | A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a pro... | 2026-10-27 |
| CVE-2024-34326 | medium | 6.1 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Alert/M... | 2026-10-27 |
| CVE-2024-34323 | critical | 10.0 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter.... | 2026-10-27 |
| CVE-2024-34321 | medium | 6.1 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes p... | 2026-10-27 |
| CVE-2024-34320 | critical | 9.8 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints. | 2026-10-27 |
| CVE-2024-58390 | high | 8.8 | No | Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action th... | 2026-10-27 |
| CVE-2024-58389 | medium | 6.1 | No | HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect user... | 2026-10-27 |
| CVE-2024-31027 | medium | 5.4 | No | Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arb... | 2026-10-27 |