Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-37081 | high | 7.8 | No | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user... | 2026-11-03 |
| CVE-2024-37051 | high | 7.5 | No | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023... | 2026-11-03 |
| CVE-2024-37385 | critical | 9.8 | No | Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: th... | 2026-11-03 |
| CVE-2024-35286 | critical | 9.8 | No | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection... | 2026-11-03 |
| CVE-2024-32030 | high | 8.1 | No | Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying... | 2026-11-03 |
| CVE-2024-35248 | high | 7.3 | No | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-36104 | critical | 9.1 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBi... | 2026-11-03 |
| CVE-2024-30104 | high | 7.8 | No | Microsoft Office Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2024-30103 | high | 8.8 | No | Microsoft Outlook Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2024-30090 | high | 7.0 | No | Microsoft Streaming Service Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-29014 | high | 8.8 | No | Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary c... | 2026-11-03 |
| CVE-2024-28074 | high | 8.8 | No | It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were imp... | 2026-11-03 |
| CVE-2024-29972 | critical | 9.8 | No | ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions b... | 2026-11-03 |
| CVE-2024-27903 | critical | 9.8 | No | OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary... | 2026-11-03 |
| CVE-2024-27275 | high | 7.8 | No | IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local us... | 2026-11-03 |
| CVE-2024-26923 | medium | 4.7 | No | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collec... | 2026-11-03 |
| CVE-2024-23472 | high | 8.0 | No | SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user... | 2026-11-03 |
| CVE-2024-23469 | high | 8.8 | No | SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an u... | 2026-11-03 |
| CVE-2024-24974 | high | 7.5 | No | The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker... | 2026-11-03 |
| CVE-2024-26230 | high | 7.8 | No | Windows Telephony Server Elevation of Privilege Vulnerability | 2026-11-03 |