Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-54357 | high | 7.5 | No | Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user... | 2026-10-28 |
| CVE-2023-24215 | critical | 9.1 | No | Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administr... | 2026-10-28 |
| CVE-2023-31317 | not reported | — | No | Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or... | 2026-10-28 |
| CVE-2023-31316 | not reported | — | No | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could... | 2026-10-28 |
| CVE-2023-31309 | not reported | — | No | Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when expo... | 2026-10-28 |
| CVE-2023-30059 | medium | 5.4 | No | An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation... | 2026-10-28 |
| CVE-2023-27753 | high | 8.0 | No | An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file. | 2026-10-28 |
| CVE-2023-46453 | critical | 9.8 | No | Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username tha... | 2026-10-28 |
| CVE-2023-47268 | medium | 5.3 | No | In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host whe... | 2026-10-28 |
| CVE-2023-42346 | high | 7.5 | No | Alkacon OpenCms before 16 allows XXE when the refers to an external host. | 2026-10-28 |
| CVE-2023-42345 | medium | 6.1 | No | A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp. | 2026-10-28 |
| CVE-2023-42344 | high | 7.3 | No | Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on... | 2026-10-28 |
| CVE-2023-42343 | medium | 6.1 | No | A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type. | 2026-10-28 |
| CVE-2023-54349 | medium | 6.1 | No | AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts b... | 2026-10-28 |
| CVE-2023-54348 | high | 8.8 | No | ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fi... | 2026-10-28 |
| CVE-2023-54347 | high | 7.5 | No | OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repe... | 2026-10-28 |
| CVE-2023-54346 | high | 7.5 | No | WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download c... | 2026-10-28 |
| CVE-2023-54345 | high | 8.8 | No | Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Mana... | 2026-10-28 |
| CVE-2023-54344 | critical | 9.8 | No | Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbit... | 2026-10-28 |
| CVE-2023-54342 | critical | 9.8 | No | Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenti... | 2026-10-28 |