Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-39700 | critical | 9.8 | No | JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option... | 2026-11-03 |
| CVE-2024-3863 | critical | 9.8 | No | The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Ot... | 2026-11-03 |
| CVE-2024-38200 | medium | 6.5 | No | Microsoft Office Spoofing Vulnerability | 2026-11-03 |
| CVE-2024-38100 | high | 7.8 | No | Windows File Explorer Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-38368 | critical | 9.3 | No | trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. A vulnerability affected older pods which migrated f... | 2026-11-03 |
| CVE-2024-38472 | high | 7.5 | No | SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or conten... | 2026-11-03 |
| CVE-2024-39331 | critical | 9.8 | No | In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as s... | 2026-11-03 |
| CVE-2024-37081 | high | 7.8 | No | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user... | 2026-11-03 |
| CVE-2024-37051 | high | 7.5 | No | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023... | 2026-11-03 |
| CVE-2024-37385 | critical | 9.8 | No | Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: th... | 2026-11-03 |
| CVE-2024-35286 | critical | 9.8 | No | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection... | 2026-11-03 |
| CVE-2024-32030 | high | 8.1 | No | Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying... | 2026-11-03 |
| CVE-2024-35248 | high | 7.3 | No | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-36104 | critical | 9.1 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBi... | 2026-11-03 |
| CVE-2024-30104 | high | 7.8 | No | Microsoft Office Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2024-30103 | high | 8.8 | No | Microsoft Outlook Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2024-30090 | high | 7.0 | No | Microsoft Streaming Service Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-29014 | high | 8.8 | No | Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary c... | 2026-11-03 |
| CVE-2024-28074 | high | 8.8 | No | It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were imp... | 2026-11-03 |
| CVE-2024-29972 | critical | 9.8 | No | ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions b... | 2026-11-03 |