Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-34119 | high | 7.8 | No | Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escal... | 2026-10-28 |
| CVE-2023-2085 | medium | 4.3 | No | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templa... | 2026-10-28 |
| CVE-2023-2572 | medium | 6.1 | No | The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflect... | 2026-10-28 |
| CVE-2023-3055 | medium | 4.3 | No | The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This... | 2026-10-28 |
| CVE-2023-29154 | high | 7.2 | No | SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product wit... | 2026-10-28 |
| CVE-2023-33181 | medium | 5.3 | No | Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace wh... | 2026-10-28 |
| CVE-2023-31101 | medium | 6.5 | No | Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from... | 2026-10-28 |
| CVE-2023-32979 | medium | 4.3 | No | Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall... | 2026-10-28 |
| CVE-2023-32070 | medium | 6.1 | No | XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values... | 2026-10-28 |
| CVE-2023-30742 | medium | 6.1 | No | SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, W... | 2026-10-28 |
| CVE-2023-30741 | medium | 6.1 | No | Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated atta... | 2026-10-28 |
| CVE-2023-22789 | high | 8.8 | No | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful expl... | 2026-10-28 |
| CVE-2023-2468 | medium | 4.3 | No | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the r... | 2026-10-28 |
| CVE-2023-2462 | medium | 4.3 | No | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via... | 2026-10-28 |
| CVE-2023-23815 | medium | 5.4 | No | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Jackson Multi-column Tag Map plugin <= 17.0.24 versions. | 2026-10-28 |
| CVE-2023-27270 | medium | 6.5 | No | SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791,... | 2026-10-28 |
| CVE-2023-0749 | medium | 6.5 | No | The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowin... | 2026-10-28 |
| CVE-2023-1357 | critical | 9.8 | No | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by th... | 2026-10-28 |
| CVE-2023-20627 | medium | 6.7 | No | In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with... | 2026-10-28 |
| CVE-2023-0902 | medium | 5.4 | No | A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown... | 2026-10-28 |