Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-22234 | high | 7.8 | No | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code... | 2026-10-28 |
| CVE-2023-22231 | medium | 5.5 | No | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to d... | 2026-10-28 |
| CVE-2023-23783 | high | 7.8 | No | A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to... | 2026-10-28 |
| CVE-2023-24521 | medium | 6.1 | No | Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 7... | 2026-10-28 |
| CVE-2023-0025 | medium | 5.4 | No | SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an u... | 2026-10-28 |
| CVE-2023-0177 | medium | 5.4 | No | The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before... | 2026-10-28 |
| CVE-2023-23697 | low | 3.3 | No | Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A loca... | 2026-10-28 |
| CVE-2023-0785 | low | 3.7 | No | A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unkn... | 2026-10-28 |
| CVE-2023-21435 | medium | 5.5 | No | Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory addr... | 2026-10-28 |
| CVE-2023-0745 | critical | 9.8 | No | The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using... | 2026-10-28 |
| CVE-2023-0758 | critical | 9.8 | No | A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown processing of the file src... | 2026-10-28 |
| CVE-2023-0251 | high | 7.8 | No | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations with... | 2026-10-28 |
| CVE-2023-25166 | medium | 6.5 | No | formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to poly... | 2026-10-28 |
| CVE-2023-0704 | medium | 6.5 | No | Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy a... | 2026-10-28 |
| CVE-2023-0698 | high | 8.8 | No | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a... | 2026-10-28 |
| CVE-2023-0697 | medium | 6.5 | No | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the c... | 2026-10-28 |
| CVE-2023-0062 | medium | 5.4 | No | The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them b... | 2026-10-28 |
| CVE-2023-22839 | high | 7.5 | No | On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x... | 2026-10-28 |
| CVE-2023-0606 | medium | 6.1 | No | Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7. | 2026-10-28 |
| CVE-2023-43000 | high | 8.8 | Listed | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, S... | 2026-10-28 |