Browse All CVEs
33,080 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-30549 |
high | 7.8 | 0.0037 | 2026-10-29 | Apptainer is an open source container platform for Linux. There is an ext4 use-after-free | |
CVE-2023-2462 |
medium | 4.3 | 0.0080 | 2026-10-29 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a | |
CVE-2023-2468 |
medium | 4.3 | 0.0080 | 2026-10-29 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 a | |
CVE-2023-22691 |
high | 8.8 | 0.0027 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category | |
CVE-2023-22640 |
high | 8.8 | 0.0089 | 2026-10-29 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 | |
CVE-2023-31039 |
critical | 9.8 | 0.0152 | 2026-10-29 | Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute | |
CVE-2023-22789 |
high | 8.8 | 0.0160 | 2026-10-29 | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and | |
CVE-2023-30741 |
medium | 6.1 | 0.0039 | 2026-10-29 | Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - | |
CVE-2023-30742 |
medium | 6.1 | 0.0044 | 2026-10-29 | SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S | |
CVE-2023-27407 |
critical | 9.9 | 0.0130 | 2026-10-29 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web bas | |
CVE-2023-27408 |
low | 3.3 | 0.0017 | 2026-10-29 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` m | |
CVE-2023-27409 |
low | 3.3 | 0.0017 | 2026-10-29 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path trav | |
CVE-2023-29104 |
high | 7.6 | 0.0071 | 2026-10-29 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 | |
CVE-2023-29105 |
high | 7.5 | 0.0055 | 2026-10-29 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 | |
CVE-2023-29106 |
high | 7.5 | 0.0072 | 2026-10-29 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 | |
CVE-2023-29107 |
medium | 5.3 | 0.0065 | 2026-10-29 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 | |
CVE-2023-29128 |
low | 2.7 | 0.0068 | 2026-10-29 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 | |
CVE-2023-30898 |
high | 8.8 | 0.0111 | 2026-10-29 | A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 Hot | |
CVE-2023-30899 |
high | 8.8 | 0.0111 | 2026-10-29 | A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 Hot | |
CVE-2023-30985 |
medium | 5.5 | 0.0020 | 2026-10-29 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), | |
CVE-2023-30986 |
high | 7.8 | 0.0023 | 2026-10-29 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), | |
CVE-2022-45846 |
high | 8.8 | 0.0025 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Nickys Image Map Pro for WordPress - In | |
CVE-2023-32070 |
medium | 6.1 | 0.0065 | 2026-10-29 | 1 PoC | XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn |
CVE-2023-28325 |
medium | 6.5 | 0.0039 | 2026-10-29 | An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hack | |
CVE-2023-22685 |
medium | 4.8 | 0.0037 | 2026-10-29 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhu | |
CVE-2023-32979 |
medium | 4.3 | 0.0050 | 2026-10-29 | Jenkins Email Extension Plugin does not perform a permission check in a method implementin | |
CVE-2023-31208 |
high | 8.8 | 0.0097 | 2026-10-29 | Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0 | |
CVE-2023-22348 |
medium | 4.3 | 0.0059 | 2026-10-29 | Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b | |
CVE-2023-31135 |
medium | 5.5 | 0.0015 | 2026-10-29 | Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vuln | |
CVE-2023-30191 |
critical | 9.8 | 0.0076 | 2026-10-29 | PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleF | |
CVE-2023-31101 |
medium | 6.5 | 0.0111 | 2026-10-29 | Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Ap | |
CVE-2023-28319 |
high | 7.5 | 0.0249 | 2026-10-29 | A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature | |
CVE-2023-28320 |
medium | 5.9 | 0.0266 | 2026-10-29 | A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides sever | |
CVE-2023-28321 |
medium | 5.9 | 0.0181 | 2026-10-29 | An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supp | |
CVE-2023-28322 |
low | 3.7 | 0.0221 | 2026-10-29 | An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfer | |
CVE-2023-2288 |
high | 8.8 | 0.1797 | 2026-10-29 | The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths | |
CVE-2023-33181 |
medium | 5.3 | 0.0054 | 2026-10-29 | Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version | |
CVE-2023-29154 |
high | 7.2 | 0.4144 | 2026-10-29 | SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5 | |
CVE-2022-43760 |
high | 8.4 | 0.0071 | 2026-10-29 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vu | |
CVE-2023-22647 |
high | 8.0 | 0.0072 | 2026-10-29 | An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to l | |
CVE-2023-22648 |
high | 8.8 | 0.0045 | 2026-10-29 | A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in | |
CVE-2023-0430 |
medium | 6.5 | 0.0037 | 2026-10-29 | Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail | |
CVE-2023-0547 |
medium | 6.5 | 0.0037 | 2026-10-29 | OCSP revocation status of recipient certificates was not checked when sending S/Mime encry | |
CVE-2023-0616 |
medium | 6.5 | 0.0049 | 2026-10-29 | If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeat | |
CVE-2023-0767 |
high | 8.8 | 0.0082 | 2026-10-29 | An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbit | |
CVE-2023-1945 |
medium | 6.5 | 0.0064 | 2026-10-29 | Unexpected data returned from the Safe Browsing API could have led to memory corruption an | |
CVE-2023-23598 |
medium | 6.5 | 0.0064 | 2026-10-29 | Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all | |
CVE-2023-23599 |
medium | 6.5 | 0.0060 | 2026-10-29 | When copying a network request from the developer tools panel as a curl command the output | |
CVE-2023-23601 |
medium | 6.5 | 0.0035 | 2026-10-29 | Navigations were being allowed when dragging a URL from a cross-origin iframe into the sam | |
CVE-2023-23605 |
high | 8.8 | 0.0070 | 2026-10-29 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Fir |