Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-23384 | high | 8.4 | No | Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker. | 2026-11-03 |
| CVE-2024-23466 | high | 8.8 | No | SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulne... | 2026-11-03 |
| CVE-2024-20482 | medium | 6.5 | No | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Manageme... | 2026-11-03 |
| CVE-2024-20479 | medium | 4.8 | No | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag... | 2026-11-03 |
| CVE-2024-20443 | medium | 5.4 | No | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag... | 2026-11-03 |
| CVE-2024-20419 | critical | 10.0 | No | A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote at... | 2026-11-03 |
| CVE-2024-22274 | high | 7.2 | No | The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vC... | 2026-11-03 |
| CVE-2024-20017 | critical | 9.8 | No | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no... | 2026-11-03 |
| CVE-2024-12108 | critical | 9.6 | No | In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API. | 2026-11-03 |
| CVE-2023-41251 | high | 7.2 | No | A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially cra... | 2026-11-03 |
| CVE-2023-0507 | medium | 5.4 | No | Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability... | 2026-11-03 |
| CVE-2022-39324 | low | 3.5 | No | Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapsho... | 2026-11-03 |
| CVE-2023-21748 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-36062 | low | 3.8 | No | Grafana is an open-source platform for monitoring and observability. In versions prior to 8.5.13, 9.0.9, and 9.1.6, Grafana is subject to Im... | 2026-11-03 |
| CVE-2022-34718 | critical | 9.8 | No | Windows TCP/IP Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2022-35768 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-34707 | high | 7.8 | No | Windows Kernel Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2022-23498 | high | 8.8 | No | Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, i... | 2026-11-03 |
| CVE-2022-23552 | medium | 5.4 | No | Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and... | 2026-11-03 |
| CVE-2022-2068 | high | 7.3 | No | In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not pr... | 2026-11-03 |