Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-21435 | medium | 5.5 | No | Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory addr... | 2026-10-28 |
| CVE-2023-0745 | critical | 9.8 | No | The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using... | 2026-10-28 |
| CVE-2023-0758 | critical | 9.8 | No | A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown processing of the file src... | 2026-10-28 |
| CVE-2023-0251 | high | 7.8 | No | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations with... | 2026-10-28 |
| CVE-2023-25166 | medium | 6.5 | No | formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to poly... | 2026-10-28 |
| CVE-2023-0704 | medium | 6.5 | No | Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy a... | 2026-10-28 |
| CVE-2023-0698 | high | 8.8 | No | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a... | 2026-10-28 |
| CVE-2023-0697 | medium | 6.5 | No | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the c... | 2026-10-28 |
| CVE-2023-0062 | medium | 5.4 | No | The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them b... | 2026-10-28 |
| CVE-2023-22839 | high | 7.5 | No | On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x... | 2026-10-28 |
| CVE-2023-0606 | medium | 6.1 | No | Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7. | 2026-10-28 |
| CVE-2023-43000 | high | 8.8 | Listed | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, S... | 2026-10-28 |
| CVE-2026-98098 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on empty publication list... | 2026-10-28 |
| CVE-2026-118345 | high | 8.8 | No | Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the... | 2026-10-28 |
| CVE-2026-98097 | medium | 5.3 | No | In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interf... | 2026-10-28 |
| CVE-2023-52356 | high | 7.5 | No | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. Th... | 2026-10-28 |
| CVE-2026-113943 | medium | 6.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciou... | 2026-10-28 |
| CVE-2026-98096 | high | 7.4 | No | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6_sr... | 2026-10-28 |
| CVE-2026-101733 | medium | 6.5 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are... | 2026-10-28 |
| CVE-2026-101743 | medium | 6.5 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are... | 2026-10-28 |