Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-0344 | not reported | — | Listed | SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virt... | — |
| CVE-2024-29824 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same... | — |
| CVE-2024-45519 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated... | — |
| CVE-2024-43047 | not reported | — | Listed | Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of... | — |
| CVE-2024-43572 | not reported | — | Listed | Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. | — |
| CVE-2024-43573 | not reported | — | Listed | Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. | — |
| CVE-2024-23113 | not reported | — | Listed | Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to... | — |
| CVE-2024-9380 | not reported | — | Listed | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authen... | — |
| CVE-2024-30088 | not reported | — | Listed | Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escala... | — |
| CVE-2024-9680 | not reported | — | Listed | Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content... | — |
| CVE-2024-28987 | not reported | — | Listed | SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal fu... | — |
| CVE-2024-40711 | not reported | — | Listed | Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. | — |
| CVE-2024-9537 | not reported | — | Listed | ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component. | — |
| CVE-2024-38094 | not reported | — | Listed | Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. | — |
| CVE-2024-47575 | not reported | — | Listed | Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to... | — |
| CVE-2024-20481 | not reported | — | Listed | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vu... | — |
| CVE-2024-37383 | not reported | — | Listed | RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacke... | — |
| CVE-2024-8957 | not reported | — | Listed | PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privi... | — |
| CVE-2024-8956 | not reported | — | Listed | PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass au... | — |
| CVE-2024-5910 | not reported | — | Listed | Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Exp... | — |