Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-47606 | critical | 9.8 | No | GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_... | 2026-11-03 |
| CVE-2024-45717 | medium | 4.8 | No | The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. T... | 2026-11-03 |
| CVE-2024-49019 | high | 7.8 | No | Active Directory Certificate Services Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-46852 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix off-by-one in CMA heap fault handler Until VM_DONT... | 2026-11-03 |
| CVE-2024-43598 | high | 8.1 | No | LightGBM Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2024-3912 | critical | 9.8 | No | Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerab... | 2026-11-03 |
| CVE-2024-39877 | high | 8.8 | No | Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a... | 2026-11-03 |
| CVE-2024-39700 | critical | 9.8 | No | JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option... | 2026-11-03 |
| CVE-2024-3863 | critical | 9.8 | No | The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Ot... | 2026-11-03 |
| CVE-2024-38200 | medium | 6.5 | No | Microsoft Office Spoofing Vulnerability | 2026-11-03 |
| CVE-2024-38100 | high | 7.8 | No | Windows File Explorer Elevation of Privilege Vulnerability | 2026-11-03 |
| CVE-2024-38368 | critical | 9.3 | No | trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. A vulnerability affected older pods which migrated f... | 2026-11-03 |
| CVE-2024-38472 | high | 7.5 | No | SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or conten... | 2026-11-03 |
| CVE-2024-39331 | critical | 9.8 | No | In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as s... | 2026-11-03 |
| CVE-2024-37081 | high | 7.8 | No | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user... | 2026-11-03 |
| CVE-2024-37051 | high | 7.5 | No | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023... | 2026-11-03 |
| CVE-2024-37385 | critical | 9.8 | No | Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: th... | 2026-11-03 |
| CVE-2024-35286 | critical | 9.8 | No | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection... | 2026-11-03 |
| CVE-2024-32030 | high | 8.1 | No | Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying... | 2026-11-03 |
| CVE-2024-35248 | high | 7.3 | No | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | 2026-11-03 |