Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-115418 | high | 7.3 | No | SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redsh... | 2026-11-02 |
| CVE-2026-115721 | high | 7.5 | No | **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. T... | 2026-11-02 |
| CVE-2026-113440 | not reported | — | No | Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain the basic_auth and co... | 2026-11-02 |
| CVE-2026-103310 | medium | 5.3 | No | The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the mer... | 2026-11-02 |
| CVE-2022-3235 | high | 7.8 | No | Use After Free in GitHub repository vim/vim prior to 9.0.0490. | 2026-11-02 |
| CVE-2022-3234 | high | 7.8 | No | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. | 2026-11-02 |
| CVE-2022-3153 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. | 2026-11-02 |
| CVE-2022-3134 | high | 7.8 | No | Use After Free in GitHub repository vim/vim prior to 9.0.0389. | 2026-11-02 |
| CVE-2022-3099 | high | 7.8 | No | Use After Free in GitHub repository vim/vim prior to 9.0.0360. | 2026-11-02 |
| CVE-2022-3037 | high | 7.8 | No | Use After Free in GitHub repository vim/vim prior to 9.0.0322. | 2026-11-02 |
| CVE-2022-3016 | high | 7.8 | No | Use After Free in GitHub repository vim/vim prior to 9.0.0286. | 2026-11-02 |
| CVE-2022-34382 | high | 7.8 | No | Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the cus... | 2026-11-02 |
| CVE-2022-2982 | high | 7.8 | No | Use After Free in GitHub repository vim/vim prior to 9.0.0260. | 2026-11-02 |
| CVE-2022-2980 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. | 2026-11-02 |
| CVE-2022-30164 | high | 7.8 | No | Kerberos AppContainer Security Feature Bypass Vulnerability | 2026-11-02 |
| CVE-2022-32156 | high | 8.1 | No | In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates... | 2026-11-02 |
| CVE-2022-2905 | medium | 5.5 | No | An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key la... | 2026-11-02 |
| CVE-2022-2923 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. | 2026-11-02 |
| CVE-2022-2889 | high | 7.8 | No | Use After Free in GitHub repository vim/vim prior to 9.0.0225. | 2026-11-02 |
| CVE-2022-2874 | medium | 5.5 | No | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. | 2026-11-02 |