Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-34416 | critical | 9.8 | No | Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corrupti... | 2026-10-24 |
| CVE-2023-29531 | critical | 9.8 | No | An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable cr... | 2026-10-24 |
| CVE-2023-29129 | critical | 9.8 | No | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatib... | 2026-10-24 |
| CVE-2023-27407 | critical | 9.9 | No | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly... | 2026-10-24 |
| CVE-2023-31039 | critical | 9.8 | No | Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary code via ServerOptions::pid_file. An att... | 2026-10-24 |
| CVE-2023-25207 | critical | 9.8 | No | PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php. | 2026-10-24 |
| CVE-2023-23080 | critical | 9.8 | No | Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda... | 2026-10-24 |
| CVE-2026-16232 | critical | 9.8 | Listed | An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an... | 2026-10-24 |
| CVE-2026-16812 | critical | 10.0 | Listed | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functio... | 2026-10-24 |
| CVE-2026-20316 | medium | 5.3 | Listed | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attack... | 2026-10-24 |
| CVE-2026-63077 | critical | 9.8 | Listed | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | 2026-10-24 |
| CVE-2026-42016 | high | 8.8 | Listed | JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the to... | 2026-10-24 |
| CVE-2026-96185 | high | 7.5 | No | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. | 2026-10-24 |
| CVE-2026-93640 | high | 7.8 | No | A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra accou... | 2026-10-24 |
| CVE-2026-91503 | high | 8.1 | No | Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.... | 2026-10-24 |
| CVE-2026-94422 | high | 8.8 | No | An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message f... | 2026-10-24 |
| CVE-2026-91502 | high | 7.3 | No | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are... | 2026-10-24 |
| CVE-2026-91499 | high | 8.8 | No | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable... | 2026-10-24 |
| CVE-2026-91496 | high | 7.5 | No | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affe... | 2026-10-24 |
| CVE-2026-91487 | medium | 4.8 | No | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.... | 2026-10-24 |