Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-35947 | high | 8.1 | No | Gradle is a build tool with a focus on build automation and support for multi-language development. In affected versions when unpacking Tar... | 2026-11-02 |
| CVE-2023-29007 | high | 7.8 | No | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40... | 2026-11-02 |
| CVE-2023-25815 | low | 2.2 | No | In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to... | 2026-11-02 |
| CVE-2023-23384 | high | 7.3 | No | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-27537 | medium | 5.9 | No | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without... | 2026-11-02 |
| CVE-2023-22329 | low | 3.5 | No | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of... | 2026-11-02 |
| CVE-2023-21713 | high | 8.8 | No | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-21705 | high | 8.8 | No | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-21704 | high | 7.8 | No | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-21568 | high | 7.3 | No | Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2022-48564 | medium | 6.5 | No | read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malforme... | 2026-11-02 |
| CVE-2022-48560 | high | 7.5 | No | A use-after-free exists in Python through 3.9 via heappushpop in heapq. | 2026-11-02 |
| CVE-2023-1916 | medium | 6.1 | No | A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read... | 2026-11-02 |
| CVE-2023-1077 | high | 7.0 | No | In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry wil... | 2026-11-02 |
| CVE-2023-21528 | high | 7.8 | No | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2022-41083 | high | 7.8 | No | Visual Studio Code Elevation of Privilege Vulnerability | 2026-11-02 |
| CVE-2022-41042 | high | 7.4 | No | Visual Studio Code Information Disclosure Vulnerability | 2026-11-02 |
| CVE-2022-40755 | medium | 5.5 | No | JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. | 2026-11-02 |
| CVE-2022-36280 | medium | 5.5 | No | An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linu... | 2026-11-02 |
| CVE-2022-38533 | medium | 5.5 | No | In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in st... | 2026-11-02 |