Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-41730 | critical | 9.8 | No | In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can... | 2026-11-04 |
| CVE-2024-36984 | high | 8.8 | No | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that... | 2026-11-04 |
| CVE-2024-31449 | high | 8.8 | No | Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a... | 2026-11-04 |
| CVE-2024-29847 | critical | 9.8 | No | Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenti... | 2026-11-04 |
| CVE-2024-23471 | high | 8.8 | No | The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability... | 2026-11-04 |
| CVE-2024-23467 | high | 8.8 | No | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability a... | 2026-11-04 |
| CVE-2024-27820 | high | 8.8 | No | The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS... | 2026-11-04 |
| CVE-2024-10914 | critical | 9.8 | No | A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by t... | 2026-11-04 |
| CVE-2026-96219 | critical | 9.8 | No | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a net... | 2026-11-03 |
| CVE-2026-96423 | high | 7.1 | No | X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service | 2026-11-03 |
| CVE-2026-95324 | low | 3.4 | No | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to... | 2026-11-03 |
| CVE-2026-95308 | low | 3.4 | No | Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to po... | 2026-11-03 |
| CVE-2026-95293 | medium | 4.7 | No | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a cra... | 2026-11-03 |
| CVE-2026-84604 | high | 7.8 | No | A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2,... | 2026-11-03 |
| CVE-2026-82393 | high | 7.5 | No | pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in a tarball dependency's package.json manifes... | 2026-11-03 |
| CVE-2026-84595 | medium | 5.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27,... | 2026-11-03 |
| CVE-2026-84389 | low | 3.1 | No | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2... | 2026-11-03 |
| CVE-2026-84385 | medium | 5.4 | No | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7... | 2026-11-03 |
| CVE-2026-7769 | high | 8.1 | No | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gatewa... | 2026-11-03 |
| CVE-2026-7363 | high | 8.8 | No | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code ins... | 2026-11-03 |