Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-27903 | critical | 9.8 | No | OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary... | 2026-11-03 |
| CVE-2024-27275 | high | 7.8 | No | IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local us... | 2026-11-03 |
| CVE-2024-26923 | medium | 4.7 | No | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collec... | 2026-11-03 |
| CVE-2024-23472 | high | 8.0 | No | SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user... | 2026-11-03 |
| CVE-2024-23469 | high | 8.8 | No | SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an u... | 2026-11-03 |
| CVE-2024-24974 | high | 7.5 | No | The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker... | 2026-11-03 |
| CVE-2024-26230 | high | 7.8 | No | Windows Telephony Server Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-23384 | high | 8.4 | No | Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker. | 2026-11-03 |
| CVE-2024-23466 | high | 8.8 | No | SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulne... | 2026-11-03 |
| CVE-2024-20482 | medium | 6.5 | No | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Manageme... | 2026-11-03 |
| CVE-2024-20479 | medium | 4.8 | No | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag... | 2026-11-03 |
| CVE-2024-20443 | medium | 5.4 | No | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag... | 2026-11-03 |
| CVE-2024-20419 | critical | 10.0 | No | A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote at... | 2026-11-03 |
| CVE-2024-22274 | high | 7.2 | No | The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vC... | 2026-11-03 |
| CVE-2024-20017 | critical | 9.8 | No | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no... | 2026-11-03 |
| CVE-2024-12108 | critical | 9.6 | No | In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API. | 2026-11-03 |
| CVE-2023-41251 | high | 7.2 | No | A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially cra... | 2026-11-03 |
| CVE-2023-0507 | medium | 5.4 | No | Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability... | 2026-11-03 |
| CVE-2022-39324 | low | 3.5 | No | Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapsho... | 2026-11-03 |
| CVE-2023-21748 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |