Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-29720 | medium | 5.5 | No | An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to obtain sensitive information via the adopt component... | 2026-10-27 |
| CVE-2024-39037 | medium | 6.5 | No | MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter. | 2026-10-27 |
| CVE-2024-35322 | medium | 6.1 | No | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter. | 2026-10-27 |
| CVE-2024-57521 | critical | 10.0 | No | SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in S... | 2026-10-27 |
| CVE-2024-9684 | high | 7.5 | No | FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of service by sending specific message sequences. | 2026-10-27 |
| CVE-2024-24844 | high | 7.5 | No | Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control... | 2026-10-27 |
| CVE-2024-35321 | medium | 4.3 | No | MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parameter. | 2026-10-27 |
| CVE-2024-25814 | medium | 6.1 | No | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter. | 2026-10-27 |
| CVE-2024-46062 | high | 7.8 | No | Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home direc... | 2026-10-27 |
| CVE-2024-29371 | high | 7.5 | No | In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token wi... | 2026-10-27 |
| CVE-2024-29370 | medium | 5.3 | No | In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting... | 2026-10-27 |
| CVE-2024-44599 | high | 8.3 | No | FNT Command 13.4.0 is vulnerable to Directory Traversal. | 2026-10-27 |
| CVE-2024-44598 | high | 8.8 | No | FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module. | 2026-10-27 |
| CVE-2024-58305 | high | 8.8 | No | WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module instal... | 2026-10-27 |
| CVE-2024-14010 | critical | 9.8 | No | Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that allows attackers to execute arbitrary system comm... | 2026-10-27 |
| CVE-2024-58313 | high | 7.2 | No | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload a... | 2026-10-27 |
| CVE-2024-58312 | high | 7.5 | No | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulatin... | 2026-10-27 |
| CVE-2024-58309 | critical | 9.8 | No | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by inject... | 2026-10-27 |
| CVE-2024-58307 | high | 8.8 | No | CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to... | 2026-10-27 |
| CVE-2024-58306 | not reported | — | No | minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET reque... | 2026-10-27 |