Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-58397 | medium | 6.1 | No | MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations v... | 2026-10-27 |
| CVE-2024-22031 | high | 8.5 | No | A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a pro... | 2026-10-27 |
| CVE-2024-34326 | medium | 6.1 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Alert/M... | 2026-10-27 |
| CVE-2024-34323 | critical | 10.0 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter.... | 2026-10-27 |
| CVE-2024-34321 | medium | 6.1 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes p... | 2026-10-27 |
| CVE-2024-34320 | critical | 9.8 | No | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints. | 2026-10-27 |
| CVE-2024-58390 | high | 8.8 | No | Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action th... | 2026-10-27 |
| CVE-2024-58389 | medium | 6.1 | No | HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect user... | 2026-10-27 |
| CVE-2024-31027 | medium | 5.4 | No | Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arb... | 2026-10-27 |
| CVE-2024-31026 | critical | 9.8 | No | An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat i... | 2026-10-27 |
| CVE-2026-109256 | medium | 6.5 | No | FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a reall... | 2026-10-27 |
| CVE-2026-109257 | high | 7.5 | No | FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a pa... | 2026-10-27 |
| CVE-2026-105007 | high | 8.8 | No | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length... | 2026-10-27 |
| CVE-2026-105008 | critical | 9.0 | No | No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | 2026-10-27 |
| CVE-2026-102675 | high | 7.4 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, an... | 2026-10-27 |
| CVE-2026-76473 | critical | 9.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-27 |
| CVE-2026-18330 | not reported | — | No | A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within fir... | 2026-10-27 |
| CVE-2026-14255 | medium | 5.5 | No | A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malici... | 2026-10-27 |
| CVE-2026-111054 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-112374. Reason: This candidate is a duplicate of CVE-20... | 2026-10-27 |
| CVE-2026-60814 | low | 3.9 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-10-27 |