Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-50459 | medium | 5.4 | No | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user compon... | 2026-09-22 |
| CVE-2023-46273 | high | 8.8 | No | Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_s... | 2026-09-22 |
| CVE-2023-46035 | medium | 5.9 | No | The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents. | 2026-09-22 |
| CVE-2023-45023 | medium | 4.2 | No | The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component... | 2026-09-22 |
| CVE-2023-40772 | medium | 4.3 | No | A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted requ... | 2026-09-22 |
| CVE-2023-34854 | medium | 6.6 | No | HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. | 2026-09-22 |
| CVE-2023-32778 | low | 3.3 | No | An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload. | 2026-09-22 |
| CVE-2023-24291 | low | 2.9 | No | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter. | 2026-09-22 |
| CVE-2023-24288 | low | 2.9 | No | An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive... | 2026-09-22 |
| CVE-2023-24287 | low | 2.9 | No | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command. | 2026-09-22 |
| CVE-2023-24286 | low | 2.9 | No | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter. | 2026-09-22 |
| CVE-2023-24285 | low | 2.9 | No | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long mov... | 2026-09-22 |
| CVE-2023-24284 | low | 2.9 | No | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function. | 2026-09-22 |
| CVE-2023-24283 | low | 2.9 | No | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of S... | 2026-09-22 |
| CVE-2023-22631 | low | 2.7 | No | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor. | 2026-09-22 |
| CVE-2026-38924 | low | 2.9 | No | In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was... | 2026-09-22 |
| CVE-2026-31278 | high | 7.7 | No | An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers... | 2026-09-22 |
| CVE-2026-35867 | low | 3.1 | No | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2... | 2026-09-22 |
| CVE-2026-38332 | low | 2.9 | No | TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length. | 2026-09-22 |
| CVE-2026-37008 | high | 8.1 | No | CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE... | 2026-09-22 |