Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-53698 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: xsk: fix refcount underflow in error path Fix a refcount underflow pro... | 2026-10-28 |
| CVE-2023-53697 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() Memo... | 2026-10-28 |
| CVE-2023-53696 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() There is a memor... | 2026-10-28 |
| CVE-2023-53695 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF fil... | 2026-10-28 |
| CVE-2023-53694 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: riscv: ftrace: Fixup panic by disabling preemption In RISCV, we must u... | 2026-10-28 |
| CVE-2023-53693 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, incre... | 2026-10-28 |
| CVE-2023-53692 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline... | 2026-10-28 |
| CVE-2023-46718 | high | 7.8 | No | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 thr... | 2026-10-28 |
| CVE-2023-53687 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk()... | 2026-10-28 |
| CVE-2023-53686 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix null-ptr-deref in handshake_nl_done_doit() We shoul... | 2026-10-28 |
| CVE-2023-53685 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: tun: Fix memory leak for detached NAPI queue. syzkaller reported [0] m... | 2026-10-28 |
| CVE-2023-34119 | high | 7.8 | No | Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escal... | 2026-10-28 |
| CVE-2023-2085 | medium | 4.3 | No | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templa... | 2026-10-28 |
| CVE-2023-2572 | medium | 6.1 | No | The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflect... | 2026-10-28 |
| CVE-2023-3055 | medium | 4.3 | No | The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This... | 2026-10-28 |
| CVE-2023-29154 | high | 7.2 | No | SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product wit... | 2026-10-28 |
| CVE-2023-33181 | medium | 5.3 | No | Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace wh... | 2026-10-28 |
| CVE-2023-31101 | medium | 6.5 | No | Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from... | 2026-10-28 |
| CVE-2023-32979 | medium | 4.3 | No | Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall... | 2026-10-28 |
| CVE-2023-32070 | medium | 6.1 | No | XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values... | 2026-10-28 |