Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-1394 | high | 7.5 | No | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using... | 2026-11-04 |
| CVE-2024-12125 | high | 7.5 | No | A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fi... | 2026-11-04 |
| CVE-2024-12084 | critical | 9.8 | No | A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum leng... | 2026-11-04 |
| CVE-2024-11218 | high | 8.6 | No | A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition... | 2026-11-04 |
| CVE-2024-10963 | high | 7.4 | No | A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows... | 2026-11-04 |
| CVE-2024-10295 | high | 7.5 | No | A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a reque... | 2026-11-04 |
| CVE-2024-0409 | high | 7.8 | No | A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cu... | 2026-11-04 |
| CVE-2024-0646 | high | 7.8 | No | An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function spl... | 2026-11-04 |
| CVE-2024-0582 | high | 7.8 | No | A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RI... | 2026-11-04 |
| CVE-2024-0229 | high | 7.8 | No | An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reatta... | 2026-11-04 |
| CVE-2024-0408 | medium | 5.5 | No | A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When... | 2026-11-04 |
| CVE-2024-0193 | medium | 6.7 | No | A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo... | 2026-11-04 |
| CVE-2023-6816 | critical | 9.8 | No | A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. B... | 2026-11-04 |
| CVE-2023-6546 | high | 7.0 | No | A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCON... | 2026-11-04 |
| CVE-2023-6291 | high | 7.1 | No | A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A su... | 2026-11-04 |
| CVE-2023-6478 | high | 7.5 | No | A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer ov... | 2026-11-04 |
| CVE-2023-6377 | high | 7.8 | No | A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-boun... | 2026-11-04 |
| CVE-2023-6267 | critical | 9.8 | No | A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may co... | 2026-11-04 |
| CVE-2023-5824 | high | 7.5 | No | A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a... | 2026-11-04 |
| CVE-2023-5869 | high | 8.8 | No | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL... | 2026-11-04 |