Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-32070 | medium | 6.1 | No | XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values... | 2026-10-28 |
| CVE-2023-30742 | medium | 6.1 | No | SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, W... | 2026-10-28 |
| CVE-2023-30741 | medium | 6.1 | No | Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated atta... | 2026-10-28 |
| CVE-2023-22789 | high | 8.8 | No | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful expl... | 2026-10-28 |
| CVE-2023-2468 | medium | 4.3 | No | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the r... | 2026-10-28 |
| CVE-2023-2462 | medium | 4.3 | No | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via... | 2026-10-28 |
| CVE-2023-23815 | medium | 5.4 | No | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Jackson Multi-column Tag Map plugin | 2026-10-28 |
| CVE-2023-27270 | medium | 6.5 | No | SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791,... | 2026-10-28 |
| CVE-2023-0749 | medium | 6.5 | No | The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowin... | 2026-10-28 |
| CVE-2023-1357 | critical | 9.8 | No | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by th... | 2026-10-28 |
| CVE-2023-20627 | medium | 6.7 | No | In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with... | 2026-10-28 |
| CVE-2023-0902 | medium | 5.4 | No | A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown... | 2026-10-28 |
| CVE-2023-22234 | high | 7.8 | No | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code... | 2026-10-28 |
| CVE-2023-22231 | medium | 5.5 | No | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to d... | 2026-10-28 |
| CVE-2023-23783 | high | 7.8 | No | A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to... | 2026-10-28 |
| CVE-2023-24521 | medium | 6.1 | No | Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 7... | 2026-10-28 |
| CVE-2023-0025 | medium | 5.4 | No | SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an u... | 2026-10-28 |
| CVE-2023-0177 | medium | 5.4 | No | The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before... | 2026-10-28 |
| CVE-2023-23697 | low | 3.3 | No | Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A loca... | 2026-10-28 |
| CVE-2023-0785 | low | 3.7 | No | A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unkn... | 2026-10-28 |