Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-54348 | high | 8.8 | No | ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fi... | 2026-10-28 |
| CVE-2023-54347 | high | 7.5 | No | OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repe... | 2026-10-28 |
| CVE-2023-54346 | high | 7.5 | No | WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download c... | 2026-10-28 |
| CVE-2023-54345 | high | 8.8 | No | Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Mana... | 2026-10-28 |
| CVE-2023-54344 | critical | 9.8 | No | Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbit... | 2026-10-28 |
| CVE-2023-54342 | critical | 9.8 | No | Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenti... | 2026-10-28 |
| CVE-2023-20585 | not reported | — | No | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger... | 2026-10-28 |
| CVE-2023-5872 | medium | 4.3 | No | In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requ... | 2026-10-28 |
| CVE-2023-3634 | high | 8.8 | No | In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mod... | 2026-10-28 |
| CVE-2023-7340 | medium | 4.3 | No | Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sendin... | 2026-10-28 |
| CVE-2023-7339 | medium | 6.5 | No | Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate:... | 2026-10-28 |
| CVE-2023-7332 | not reported | — | No | PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attack... | 2026-10-28 |
| CVE-2023-7331 | medium | 4.7 | No | A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b1317. This vulnerability affects unknown... | 2026-10-28 |
| CVE-2023-54322 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: arm64: set __exception_irq_entry with __irq_entry as a default filter_... | 2026-10-28 |
| CVE-2023-54236 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited... | 2026-10-28 |
| CVE-2023-54235 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: PCI/DOE: Fix destroy_work_on_stack() race The following debug object s... | 2026-10-28 |
| CVE-2023-54234 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization Commit c1a... | 2026-10-28 |
| CVE-2023-54233 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC... | 2026-10-28 |
| CVE-2023-54232 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: m68k: Only force 030 bus error if PC not in exception table __get_kern... | 2026-10-28 |
| CVE-2023-54231 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix memory leak in wx_setup_rx_resources When wx_alloc_pag... | 2026-10-28 |