Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-0193 | medium | 6.7 | No | A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo... | 2026-11-04 |
| CVE-2023-6816 | critical | 9.8 | No | A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. B... | 2026-11-04 |
| CVE-2023-6546 | high | 7.0 | No | A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCON... | 2026-11-04 |
| CVE-2023-6291 | high | 7.1 | No | A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A su... | 2026-11-04 |
| CVE-2023-6478 | high | 7.5 | No | A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer ov... | 2026-11-04 |
| CVE-2023-6377 | high | 7.8 | No | A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-boun... | 2026-11-04 |
| CVE-2023-6267 | critical | 9.8 | No | A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may co... | 2026-11-04 |
| CVE-2023-5824 | high | 7.5 | No | A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a... | 2026-11-04 |
| CVE-2023-5869 | high | 8.8 | No | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL... | 2026-11-04 |
| CVE-2023-5685 | high | 7.5 | No | A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problem... | 2026-11-04 |
| CVE-2023-5574 | high | 7.0 | No | A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-sc... | 2026-11-04 |
| CVE-2023-5633 | high | 7.8 | No | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory obje... | 2026-11-04 |
| CVE-2023-5557 | high | 7.7 | No | A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sand... | 2026-11-04 |
| CVE-2023-5367 | high | 7.8 | No | A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copyi... | 2026-11-04 |
| CVE-2023-4853 | high | 8.1 | No | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests... | 2026-11-04 |
| CVE-2024-7358 | high | 7.8 | No | A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file gets... | 2026-11-04 |
| CVE-2026-91532 | high | 8.8 | No | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-11-04 |
| CVE-2026-116241 | high | 8.8 | No | pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are... | 2026-11-04 |
| CVE-2026-116239 | high | 8.8 | No | In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal account and... | 2026-11-04 |
| CVE-2026-116240 | medium | 6.5 | No | In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the absolute path w... | 2026-11-04 |