Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-32389 | low | 3.5 | No | Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensiti... | 2026-10-27 |
| CVE-2024-32387 | medium | 5.7 | No | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via th... | 2026-10-27 |
| CVE-2024-32386 | high | 7.3 | No | Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sen... | 2026-10-27 |
| CVE-2024-32385 | medium | 4.3 | No | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via a... | 2026-10-27 |
| CVE-2024-58360 | medium | 6.5 | No | stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and s... | 2026-10-27 |
| CVE-2024-58351 | critical | 9.8 | No | Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported in bot... | 2026-10-27 |
| CVE-2024-27928 | not reported | — | No | vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, if an attacker hacks into a vantage6 user... | 2026-10-27 |
| CVE-2024-24769 | not reported | — | No | vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, users can reset their MFA token via API r... | 2026-10-27 |
| CVE-2024-24709 | medium | 4.3 | No | Missing Authorization vulnerability in Shareaholic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affe... | 2026-10-27 |
| CVE-2024-28765 | medium | 5.3 | No | IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sen... | 2026-10-27 |
| CVE-2024-36333 | high | 7.8 | No | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in ar... | 2026-10-27 |
| CVE-2024-36323 | not reported | — | No | Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized acc... | 2026-10-27 |
| CVE-2024-21950 | not reported | — | No | An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of establ... | 2026-10-27 |
| CVE-2024-21962 | not reported | — | No | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p... | 2026-10-27 |
| CVE-2024-36315 | not reported | — | No | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sens... | 2026-10-27 |
| CVE-2024-43384 | high | 8.0 | No | A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer. | 2026-10-27 |
| CVE-2024-13362 | medium | 6.1 | No | Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due... | 2026-10-27 |
| CVE-2024-7083 | low | 3.5 | No | The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users su... | 2026-10-27 |
| CVE-2024-27480 | critical | 9.8 | No | givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload. | 2026-10-27 |
| CVE-2024-25183 | high | 7.5 | No | givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php. | 2026-10-27 |