CVEs published September 15, 2026
1,426 CVEs were published on September 15, 2026: 201 critical, 835 high. 1 is now in CISA KEV.
- Published
- 1,426
- Critical
- 201
- High
- 835
- Medium
- 341
- Low
- 49
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 357
Most affected products
- Google Android
- 96
- Oracle Hyperion Financial Management
- 81
- Mozilla Firefox · Mozilla Thunderbird
- 74
- Google Chrome
- 42
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- 38
- Concrete CMS
- 31
- Oracle Business Intelligence Enterprise Edition
- 29
- Oracle Siebel CRM Deployment
- 29
- Oracle Commerce Guided Search / Oracle Commerce Experience…
- 27
- Oracle WebCenter Portal
- 24
Critical 201
- CVE-2026-15640Authentication Bypass via SAML Response ManipulationDelinea Secret Server
- CVE-2026-15639Reflected Cross-Site ScriptingDelinea Secret Server
- CVE-2026-15638Cryptographic Padding OracleDelinea Secret Server
- CVE-2026-73807mySCADA myPRO Manager Missing AuthorizationmySCADA Technologies mySCADA myPRO
- CVE-2026-81855Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic KeyWärtsilä FOS-Onboard
- CVE-2026-78225Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic KeyWärtsilä FOS-Onboard
- CVE-2026-61560@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeoverzereight gitlab-mcp · @zereight/mcp-gitlab
- CVE-2026-73437On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker…Arista Networks EOS
- CVE-2026-68491An insufficient check allowed for the overwrite of arbitrary files via a symlink.Webpros SolusVM
- CVE-2026-61559@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgeryzereight gitlab-mcp · @zereight/mcp-gitlab
- CVE-2026-91939Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci ParameterCotonti
- CVE-2026-61568@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transportzereight gitlab-mcp · @zereight/mcp-gitlab
- CVE-2026-91738Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code oGoogle Chrome
- CVE-2026-91729Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execGoogle Chrome
- CVE-2026-91716Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via aGoogle Chrome
- CVE-2026-91718Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via aGoogle Chrome
- CVE-2026-91710Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sanGoogle Chrome
- CVE-2026-91728Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a Google Chrome
- CVE-2026-91749Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside thGoogle Chrome
- CVE-2026-66887Missing Authorization in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-66890Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-54337Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/OverwriteShaneIsrael fireshare
- CVE-2026-87230Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87223Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87217Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
Show all 201 entriesShow fewer entries
- CVE-2026-87214Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87189Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87188Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87186Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87184Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87176Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87175Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87173Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87172Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87170Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87129Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87128Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-83462Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83452Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).Oracle Document Management and Collaboration
- CVE-2026-83355Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics).Oracle Enterprise Manager for Fusion Middleware
- CVE-2026-83339Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83327Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-89040Tencent Mass Service Engine in Cluster (MSEC) path traversalTencent Mass Service Engine in Cluster
- CVE-2026-83283Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83282Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83269Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83268Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83261Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core).Oracle Product Lifecycle Analytics
- CVE-2026-83260Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX).Oracle Agile PLM
- CVE-2026-83232Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).Oracle Data Integrator
- CVE-2026-83229Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).Oracle Siebel CRM Deployment
- CVE-2026-83202Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83201Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83197Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts).Oracle Siebel Apps - Financial Services
- CVE-2026-83196Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83154Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83151Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-83149Vulnerability in Oracle Application Testing Suite.Oracle Application Testing Suite
- CVE-2026-83108Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83107Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83105Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83104Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83103Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83100Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83099Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83098Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83095Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83094Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83066Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83064Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83062Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83061Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83060Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83059Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83058Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83057Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83056Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83055Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83054Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83043Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-83042Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-83040Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-83039Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-83038Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration).Oracle WebLogic Server
- CVE-2026-83037Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83036Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83035Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83031Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83029Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).Oracle Managed File Transfer
- CVE-2026-83027Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83021Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2026-83020Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-83006Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83001Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-83000Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82999Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82998Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82997Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82995Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-82994Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-73963Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73962Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73961Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).Oracle JDeveloper
- CVE-2026-73957Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73956Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-73953Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73952Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73950Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73948Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-73947Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73946Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73945Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73944Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73940Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-71163Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-71133Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-70913Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager
- CVE-2026-70757Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-70756Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-70748Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-92240Out-of-bounds read in IMAP response parserMozilla Thunderbird
- CVE-2026-92238Ambiguous parsing of mail headersMozilla Thunderbird
- CVE-2026-76675Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76674Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76673Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76672Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76670Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76669Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-69204Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)http4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-56960In multiple locations, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-55366In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.Google Android
- CVE-2026-19773libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitylibwebsockets
- CVE-2026-11921Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-61667DIRAC: RCE in FileCatalog DatasetManager via SQL injection + evalDIRACGrid DIRAC · dirac
- CVE-2026-53459Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpointsmaziggy bambuddy
- CVE-2026-45579DIRAC: RCE in RequestManager due to eval on untrusted inputDIRACGrid DIRAC · dirac
- CVE-2026-11928Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-12351IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injectionIBM MQ
- CVE-2026-53710MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_serverIBM mcp-context-forge · mcp-contextforge-gateway
- CVE-2026-46488motionEye: Authentication possible via password hashmotioneye-project motioneye · motioneye
- CVE-2024-58385Yonyou U8 CRM SQL Injection via fillbacksettingedit.phpYonyou U8 CRM
- CVE-2023-54398Yonyou U8 Cloud Java Deserialization RCE via FileManageServletYonyou U8 Cloud
- CVE-2026-89026Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originateIssabel Foundation Issabel Framework
- CVE-2026-89022BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusionbookstackapp bookstack
- CVE-2026-77866SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hostsSlab safeurl · safeurl
- CVE-2026-77972safeurl validated address is not bound to the request, allowing DNS rebindingSlab safeurl · safeurl
- CVE-2026-55211surfio IRAP header size fields cause out-of-bounds readsequinor surfio · surfio
- CVE-2026-91988atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCPdep0we atomic-agents-stack · atomic-agents-stack
- CVE-2026-91949FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation BypassFreeRDP
- CVE-2024-14029Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encodingtornadoweb tornado · tornado
- CVE-2023-54397Tornado before 6.3.3 HTTP Request Smuggling via Content-Lengthtornadoweb tornado · tornado
- CVE-2026-61549Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backendwoodpecker-ci woodpecker · github.com/woodpecker-ci/wood… +3
- CVE-2026-63696Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability.Dell SmartFabric OS10 Software
- CVE-2026-63695Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability.Dell SmartFabric OS10 Software
- CVE-2026-55158Conflibot: Command injection via crafted pull request branch names under pull_request_targetwktk conflibot
- CVE-2026-39919Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output AdapterArtifex Software Ghostscript
- CVE-2026-59971MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)designcomputer mysql_mcp_server · mysql-mcp-server
- CVE-2026-46495OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMIOpenIdentityPlatform OpenDJ · org.openidentityplatform.o… +1
- CVE-2026-77179Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackDocker Sandboxes
- CVE-2026-92079Mitigation bypass in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92075Mitigation bypass in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92071Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92066Sandbox escape in the Profile Backup componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92061Incorrect boundary conditions in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92059Incorrect boundary conditions in the DOM: Editor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92057Mitigation bypass in the Enterprise Policies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92051Spoofing issue due to invalid pointer in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92050Sandbox escape due to race condition in the XPConnect componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92048Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92045Sandbox escape due to incorrect boundary conditions in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92041Mitigation bypass in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92038Mitigation bypass in the Remote Settings Client componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92037Incorrect boundary conditions in the DOM: Animation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92036Incorrect boundary conditions in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92035Sandbox escape due to incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92034Site isolation issue in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92032Sandbox escape due to invalid pointer in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92018Sandbox escape in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-89308Arbitrary command execution in TrxTimeATTENDANCETREXOM TrxTimeATTENDANCE
- CVE-2026-91998Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcpcasdoor
- CVE-2026-91995pig before 4.1.0 Unverified Password Change via /register/passwordpig-mesh pig
- CVE-2026-52824Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeoverkimai · kimai/kimai
- CVE-2026-57147praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryMervinPraison PraisonAI · MervinPraison praisonai-platfo… +1
- CVE-2026-57148praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)MervinPraison PraisonAI · MervinPraison praisonai-platfo… +1
- CVE-2026-57140PraisonAI AgentOS exposes unauthenticated agent listing and invocationMervinPraison PraisonAI · praisonai
- CVE-2026-57139PraisonAI MCPServer exposes unauthenticated HTTP tools/callMervinPraison PraisonAI · praisonai
- CVE-2026-57138PraisonAI codeMode sandbox escape via Function constructorMervinPraison PraisonAI · praisonai
- CVE-2026-57141PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolMervinPraison PraisonAI · praisonai
- CVE-2026-48717OpenAM OAuth Authorization Bypass via PKCE ChallengeOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45051OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator StorageOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62263OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypassOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-46619OpenAM Authentication Bypass via MSISDN LDAP InjectionOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62379OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallbackOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45052OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery EndpointsOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-90711proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetproxy-addr
- CVE-2026-91003D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowD-Link DI-8300
- CVE-2026-91001D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflowD-Link DI-8400
- CVE-2026-90847EFM ipTIME C200E System Setup iux_set.cgi os command injectionEFM ipTIME C200E
- CVE-2026-37152TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.
- CVE-2026-79303kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection.
- CVE-2026-88617SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint.
High 835
- CVE-2026-73459Security Advisory 0160Arista Networks EOS
- CVE-2026-73446Security Advisory 0160Arista Networks EOS
- CVE-2026-85893Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2026-69486Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-92248Gimp: integer overflow when generating a thumbnail preview for a psd fileGNOME GIMP · Red Hat Enterprise Linux
- CVE-2026-92256Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read HandlersNetcore NR255-V
- CVE-2026-76871Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read HandlersNetcore NR255-V
- CVE-2026-76870Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload ValidationNetcore NR255-V
- CVE-2026-76869Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgiNetcore NR255-V
- CVE-2026-76866Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS ParametersNetcore NR255-V
- CVE-2026-76862Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch PathsNetcore NR255-V
- CVE-2026-76861Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgiNetcore NR255-V
- CVE-2026-76860Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID TokenizationNetcore NR255-V
- CVE-2026-76859Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgiNetcore NR255-V
- CVE-2026-76857Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgiNetcore NR255-V
- CVE-2026-76856Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration EndpointsNetcore NR255-V
- CVE-2026-76855Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit EndpointsNetcore NR255-V
- CVE-2026-76854Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgiNetcore NR255-V
- CVE-2026-76853Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgiNetcore NR268
- CVE-2026-76852Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_writeNetcore NR268
- CVE-2026-83368Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component…Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,…
- CVE-2026-83408Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM for JDK, Oracle GraalVM
- CVE-2026-83357Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM for JDK, Oracle GraalVM
- CVE-2026-10144Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handlingweb-infra-dev rsbuild
- CVE-2026-92000adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Sizecthackers adm-zip · adm-zip
Show all 835 entriesShow fewer entries
- CVE-2026-61554emp3r0r has an unauthenticated HTTP Polling DoSjm33-m0 emp3r0r · github.com/jm33-m0/emp3r0r/core
- CVE-2026-91722Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside…Google Chrome
- CVE-2026-91745Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-91715Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-91711Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside…Google Chrome
- CVE-2026-91737Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-91736Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-91735Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-91709Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-91741Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-91733Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-91731Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-91748Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-91712Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-91743Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-91727Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had…Google Chrome
- CVE-2026-91734Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code…Google Chrome
- CVE-2026-91724Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-91721Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
- CVE-2026-79994Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceDocker Sandboxes
- CVE-2026-68950Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-68070Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-54544Fireshare has unauthenticated SSRF via missing login_required on webhook test endpointsShaneIsrael fireshare
- CVE-2026-88065`tts-be` application has a Broken Access Control vulnerabilityNIAEFEUP tts-be
- CVE-2026-87289Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content).Oracle Helidon
- CVE-2026-87277Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87276Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87273Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87272Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87271Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87270Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87269Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87268Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87266Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-87265Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).Oracle Purchasing
- CVE-2026-87264Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87262Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication…Oracle Agile Engineering Data Management
- CVE-2026-87261Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication…Oracle Agile Engineering Data Management
- CVE-2026-87260Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication…Oracle Agile Engineering Data Management
- CVE-2026-87259Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication…Oracle Agile Engineering Data Management
- CVE-2026-87258Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).Oracle Agile PLM
- CVE-2026-87257Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK).Oracle Agile PLM
- CVE-2026-87256Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-87254Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).Oracle Agile PLM
- CVE-2026-87250Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87249Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87247Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87246Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87245Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87244Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87243Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87242Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87241Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87240Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87239Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87238Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87237Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87236Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87235Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87234Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87233Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87232Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87231Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87229Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87228Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87227Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87226Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87225Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87224Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87222Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87221Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87220Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87219Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87218Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87216Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87215Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87213Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87212Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87211Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87210Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87209Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87208Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87207Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87206Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87205Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87204Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87203Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87202Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87201Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87200Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87199Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87198Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87197Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87196Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87195Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87194Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87193Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87192Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87191Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87190Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87187Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87185Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87183Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87182Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87181Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87180Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87179Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87178Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87177Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87174Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87171Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87168Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).Oracle Purchasing
- CVE-2026-87167Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).Oracle Purchasing
- CVE-2026-87166Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).Oracle Purchasing
- CVE-2026-87165Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award…Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-87164Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports).Oracle Banking Branch
- CVE-2026-87163Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).Oracle Purchasing
- CVE-2026-87162Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-87161Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-87160Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-87159Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-87158Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center).Oracle Order Management
- CVE-2026-87157Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-87156Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87155Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87154Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87153Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87152Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).Oracle Installed Base
- CVE-2026-87151Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).Oracle Bills of Material
- CVE-2026-87150Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).Oracle Bills of Material
- CVE-2026-87149Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-87148Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87147Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87146Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87145Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87144Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87143Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87142Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87141Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87140Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87139Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87138Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87137Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87136Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87135Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87134Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87133Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87132Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87131Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87130Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87127Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).Oracle Purchasing
- CVE-2026-87126Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security).Oracle Report Manager
- CVE-2026-87125Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations).Oracle Financials for Asia/Pacific
- CVE-2026-87124Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).Oracle iRecruitment
- CVE-2026-83490Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).Oracle iRecruitment
- CVE-2026-83489Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Onboarding Batch Processes).Oracle Banking Origination
- CVE-2026-83487Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).Oracle Product Hub
- CVE-2026-83486Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).Oracle Product Hub
- CVE-2026-83485Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).Oracle Product Hub
- CVE-2026-83484Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations).Oracle US Federal Human Resources
- CVE-2026-83483Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis).Oracle Advanced Benefits
- CVE-2026-83482Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).Oracle Contracts
- CVE-2026-83481Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).Oracle Contracts
- CVE-2026-83479Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).Oracle Contracts
- CVE-2026-83477Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches).Oracle Work in Process
- CVE-2026-83465Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83464Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83463Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83461Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83457Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83456Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83455Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83454Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).Oracle Document Management and Collaboration
- CVE-2026-83453Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).Oracle Document Management and Collaboration
- CVE-2026-83451Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Workbench
- CVE-2026-83450Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).Oracle Bills of Material
- CVE-2026-83449Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83448Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83447Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83446Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).Oracle Financials Common Modules
- CVE-2026-83445Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-83444Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83442Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83440Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83439Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper).Oracle Helidon
- CVE-2026-83438Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations).Oracle Engineering
- CVE-2026-83437Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).Oracle Engineering
- CVE-2026-83436Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management).Oracle Depot Repair
- CVE-2026-83435Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83434Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Workbench
- CVE-2026-83432Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2026-83430Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Workbench
- CVE-2026-83429Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83428Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83425Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-83424Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper).Oracle JDeveloper
- CVE-2026-83423Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).Oracle JDeveloper
- CVE-2026-83422Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-83420Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft (component: Engineering).Oracle PeopleSoft Enterprise FIN Engineering Brazil
- CVE-2026-83418Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component…Oracle Communications Cloud Native Core Security Edge Prote…
- CVE-2026-83417Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component…Oracle Communications Cloud Native Core Security Edge Prote…
- CVE-2026-83415Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83412Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83411Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83410Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83356Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite (component: Security).Oracle Enterprise Command Center Framework
- CVE-2026-83353Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-83352Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83351Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83350Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83349Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83348Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83345Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83344Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table).Oracle Identity Manager Connector
- CVE-2026-83343Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Network Management System
- CVE-2026-83342Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Network Management System
- CVE-2026-83341Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83340Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security).Oracle Identity Manager
- CVE-2026-83338Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2026-83337Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent).Oracle Middleware Common Libraries and Tools
- CVE-2026-83336Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83335Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83334Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).Oracle Web Services Manager
- CVE-2026-83333Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83332Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83331Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83330Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket).Oracle Helidon
- CVE-2026-83329Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83328Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83326Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).Oracle Siebel CRM Integration
- CVE-2026-83325Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83324Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83323Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83322Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83321Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83320Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration).Oracle BI Publisher
- CVE-2026-83319Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).Oracle BI Publisher
- CVE-2026-83318Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration).Oracle BI Publisher
- CVE-2026-83317Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Installation).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83316Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83315Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83314Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).Oracle BI Publisher
- CVE-2026-83313Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83312Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2026-83311Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83310Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83309Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2026-83308Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83307Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83306Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services).Oracle JDeveloper
- CVE-2026-83305Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83304Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83303Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83302Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).Oracle BI Publisher
- CVE-2026-83301Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Service Administration UI).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83300Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83299Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83298Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83297Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83296Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83295Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83294Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83293Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: FNDN).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83292Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83291Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83290Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83289Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83288Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83287Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83286Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83285Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83281Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver).Oracle Helidon
- CVE-2026-83280Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2).Oracle Helidon
- CVE-2026-83277Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).Oracle Agile PLM MCAD Connector
- CVE-2026-83276Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).Oracle Helidon
- CVE-2026-83273Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83272Vulnerability in the Oracle Text component of Oracle Database Server.Oracle Database Server
- CVE-2026-83271Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83270Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83267Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).Oracle BI Publisher
- CVE-2026-83266Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services).Oracle JDeveloper
- CVE-2026-83265Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Agent).Oracle Web Services Manager
- CVE-2026-83264Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-83263Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-83262Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-83259Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83258Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83257Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83256Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83255Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83254Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83253Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83252Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83249Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83248Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83247Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83246Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83245Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83244Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83243Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83242Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83241Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83240Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83239Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83238Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83237Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83236Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83235Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83234Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83233Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83231Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-dbclient-mongodb).Oracle Helidon
- CVE-2026-83230Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).Oracle Siebel CRM Deployment
- CVE-2026-83228Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83227Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).Oracle Siebel CRM Integration
- CVE-2026-83226Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83225Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83224Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83223Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Remote).Oracle Siebel CRM Deployment
- CVE-2026-83222Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83221Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).Oracle Siebel CRM Integration
- CVE-2026-83220Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe).Oracle Siebel CRM Integration
- CVE-2026-83219Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83218Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83217Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83216Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83215Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83214Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83213Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports).Oracle Siebel CRM End User
- CVE-2026-83212Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training).Oracle Siebel Apps - Self Service
- CVE-2026-83211Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83210Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83209Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).Oracle Siebel CRM Development
- CVE-2026-83208Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration).Oracle Siebel CRM Deployment
- CVE-2026-83207Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting).Oracle Siebel CRM Development
- CVE-2026-83206Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications (component…Oracle Banking Corporate Lending Process Management
- CVE-2026-83205Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83204Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Internal Operations).Oracle Sourcing
- CVE-2026-83203Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83199Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83195Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83194Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations).Oracle Depot Repair
- CVE-2026-83193Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences).Oracle Siebel Apps - Life Sciences
- CVE-2026-83192Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83191Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83190Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83189Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation).Oracle User Management
- CVE-2026-83188Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations).Oracle Depot Repair
- CVE-2026-83187Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).Oracle Common Applications Calendar
- CVE-2026-83186Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).Oracle Common Applications Calendar
- CVE-2026-83185Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2026-83184Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83183Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83182Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools).Oracle Siebel CRM Development
- CVE-2026-83181Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces).Oracle Siebel CRM Development
- CVE-2026-83180Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83179Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).Oracle Common Applications Calendar
- CVE-2026-83178Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83177Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83176Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2026-83174Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework).Oracle CRM Technical Foundation
- CVE-2026-83173Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83172Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: OSO Other).Oracle Sales Online
- CVE-2026-83171Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83170Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83169Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).Oracle One-to-One Fulfillment
- CVE-2026-83168Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2026-83167Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83166Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2026-83165Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface).Oracle Customer Interaction History
- CVE-2026-83164Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2026-83163Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload).Oracle Application Object Library
- CVE-2026-83162Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83161Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Intelligence
- CVE-2026-83160Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83159Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch).Oracle Applications DBA
- CVE-2026-83158Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83157Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83156Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server.Oracle Database Server
- CVE-2026-83155Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83153Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83152Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Intelligence
- CVE-2026-83150Vulnerability in Oracle Application Testing Suite.Oracle Application Testing Suite
- CVE-2026-83148Vulnerability in Oracle Application Testing Suite.Oracle Application Testing Suite
- CVE-2026-83147Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory).Oracle PeopleSoft Enterprise FIN Inventory Brazil
- CVE-2026-83146Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83145Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).Oracle Siebel Apps - Customer Order Management
- CVE-2026-83144Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).Oracle Siebel Apps - Customer Order Management
- CVE-2026-83143Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).Oracle Siebel Apps - Life Sciences
- CVE-2026-83142Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations).Oracle Proposals
- CVE-2026-83141Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83138Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83137Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83136Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83135Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83134Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83133Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83132Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83131Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download).Oracle Web Applications Desktop Integrator
- CVE-2026-83130Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Site Hub
- CVE-2026-83129Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales
- CVE-2026-83128Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Offline
- CVE-2026-83127Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Offline
- CVE-2026-83126Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Online
- CVE-2026-83125Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-83124Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Online
- CVE-2026-83123Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-83122Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-83121Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83120Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).Oracle Alert
- CVE-2026-83119Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations).Oracle User Management
- CVE-2026-83118Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-83117Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-83116Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-83115Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83114Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).Oracle Quality
- CVE-2026-83113Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).Oracle Quality
- CVE-2026-83112Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Lease and Finance Management
- CVE-2026-83111Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Partner Management
- CVE-2026-83110Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83106Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83102Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83101Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83096Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83093Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83092Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83091Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83090Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83089Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).Oracle Alert
- CVE-2026-83088Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83087Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83086Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83085Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83084Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83083Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83082Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83081Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2026-83080Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports).Oracle Banking Branch
- CVE-2026-83079Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83078Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83075Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83074Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83073Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83072Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.Oracle Applications Framework
- CVE-2026-83071Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83070Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal).Oracle PeopleSoft Enterprise PRTL Interaction Hub
- CVE-2026-83069Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).Oracle Fusion Middleware Control
- CVE-2026-83068Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core).Oracle Enterprise Manager for Oracle Database
- CVE-2026-83067Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components).Oracle JDeveloper
- CVE-2026-83065Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83063Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83053Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83052Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83051Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83050Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83049Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-83048Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83047Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83046Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83045Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83044Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83041Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-83034Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83033Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83032Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83030Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).Oracle Managed File Transfer
- CVE-2026-83028Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83026Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83025Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83024Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83023Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83022Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83019Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83018Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83017Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83016Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83015Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83014Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83013Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83012Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83011Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-83010Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83009Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83008Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83007Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83005Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83004Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83003Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83002Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-82996Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-82993Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-82992Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation).Oracle Siebel CRM Deployment
- CVE-2026-73966Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-73960Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-73959Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-73958Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73955Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-73954Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-73951Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73949Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73943Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-73942Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-73941Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73926Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-71047Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager
- CVE-2026-70915Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager
- CVE-2026-87288Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2026-87287Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2026-87286Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2026-61544libp2p-quic: Remote panic via certificate expiry race during QUIC handshakerust-libp2p · libp2p-quic
- CVE-2026-92239Buffer overrun in IMAPMozilla Thunderbird
- CVE-2026-76820OpenCTI: Synchronizer SSRF: stream fetch has no URL validationOpenCTI-Platform opencti
- CVE-2026-76821OpenCTI: User-Controlled ReDoS in JSON Ingestion MapperOpenCTI-Platform opencti
- CVE-2026-88975Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZEhttp4s · org.http4s:http4s-ember-core_2.13 +2
- CVE-2026-73458On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially…Arista Networks EOS
- CVE-2026-69202Http4s Ember HTTP/2: unbounded inbound body bufferinghttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-76693Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76692Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76691Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API EndpointHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76690Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76689Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN…Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76688Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76687Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76686Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76685Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN…Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76684Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator APIHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76683Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76682Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76681Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator APIHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76680Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76679Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76678Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76677Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76676Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-69218Http4s Ember HTTP/2: unbounded continuation frame accumulationhttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69203Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMShttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69217Http4s: Ember Server accepts duplicate Content-Length headershttp4s
- CVE-2026-69210Http4s: WebSocket decoder accepts negative length, causing infinite decode loophttp4s
- CVE-2026-69205Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)http4s · org.http4s:http4s-ember-core_3 +2
- CVE-2026-13327Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a…Devolutions Server
- CVE-2026-69213Http4s Ember HTTP/2: unbounded outbound frame queuehttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69209Http4s: WebSocket decoder accepts unbounded message sizeshttp4s
- CVE-2026-78081Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2…j2commerce.com J2Store extension for Joomla
- CVE-2026-81568Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-69208Http4s: DigestAuth nonce map grows unboundedhttp4s · org.http4s:http4s-ember-server_2.12 +2
- CVE-2026-81567Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2…j2commerce.com J2Store extension for Joomla
- CVE-2026-82189Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-58766In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-58744In multiple locations, there is a possible escalation of privilege due to improper input validation.Google Android
- CVE-2026-58734In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition.Google Android
- CVE-2026-58728In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-58724In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58710In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58704In Cellular Modem, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58701In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition.Google Android
- CVE-2026-58699In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check.Google Android
- CVE-2026-58695In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check.Google Android
- CVE-2026-58691In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation.Google Android
- CVE-2026-58683In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-58679In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code.Google Android
- CVE-2026-58678In Bootloader, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-57014In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-57012In the Setup Wizard, there is a possible remote package install due to a missing permission check.Google Android
- CVE-2026-57008In Modem, there is a possible information disclosure due to improper input validation.Google Android
- CVE-2026-56997In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56986In multiple files, there is a possible out-of-bounds read due to type confusion.Google Android
- CVE-2026-56985In multiple files, there is a possible way to obtain signatures due to type confusion.Google Android
- CVE-2026-56982In VPU, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-56978In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-56974In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-56970In multiple locations, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-56967In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-56945In VPU, there is a possible out-of-bounds write due to a confused deputy.Google Android
- CVE-2026-56942In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56941In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-56920In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-56914In multiple locations, there is a possible use-after-free due to improper locking.Google Android
- CVE-2026-56882In Cellular Modem, there is a possible information disclosure due to a logic error in the code.Google Android
- CVE-2026-56881In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-55359In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-55351In VPU, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-55343In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-55331In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-55323In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-55318In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-55306In Cellular Modem, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-55301In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-0200In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-0199In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-0194In multiple locations, there is a possible permission bypass due to an integer overflow.Google Android
- CVE-2026-0189In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-0171In multiple locations, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-0170In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-0159In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-92176pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92177pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92178pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92179pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92180pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerabilitypdfforge PDF Architect
- CVE-2026-19781Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2026-19886OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-19885OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-19774BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityBlueZ
- CVE-2026-85234Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engineRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-81899Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboardConcrete CMS
- CVE-2026-57441MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalencebitbonsai mcpvault · @bitbonsai/mcpvault
- CVE-2026-58483mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`ihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-40058Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for WindowsCrowdStrike Falcon sensor for Windows · CrowdStrike Laroux…
- CVE-2026-58485mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`ihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-81238Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.Dell Wyse Management Suite
- CVE-2026-81235Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability.Dell Wyse Management Suite
- CVE-2026-11728IBM MQ .NET client is vulnerable to remote code executionIBM MQ
- CVE-2026-56827Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility…shopperlabs shopper · shopper/framework
- CVE-2026-81240Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Dell Wyse Management Suite
- CVE-2026-56829Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock componentshopperlabs shopper · shopper/framework
- CVE-2026-18115In Concrete CMS 9.2.0 to 9.5.2, Missing Authorization in REST API Users update() and change_password Enables Account Takeover.Concrete CMS
- CVE-2026-56825Shopper: Missing authorization on product removal actions in CollectionProducts componentshopperlabs shopper · shopper/framework
- CVE-2026-58502githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflowgouef githubtoplanguages
- CVE-2026-81239Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Dell Wyse Management Suite
- CVE-2026-13210Incorrect Authorization in GitLabGitLab
- CVE-2026-81236Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Dell Wyse Management Suite
- CVE-2026-18113Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page NamesConcrete CMS
- CVE-2026-11729IBM MQ Java messaging is vulnerable to remote code executionIBM MQ
- CVE-2026-81898Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association viewsConcrete CMS
- CVE-2026-61668DIRAC: Pilot code downloaded over unverified HTTPS connectionDIRACGrid DIRAC · dirac
- CVE-2026-11926Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-11929Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-54549Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetchpipeboard-co meta-ads-mcp · meta-ads-mcp
- CVE-2026-54547Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Tokenpipeboard-co meta-ads-mcp · meta-ads-mcp
- CVE-2026-11934Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-12101Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-55225Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`strimzi-kafka-operator · io.strimzi:strimzi
- CVE-2026-12150IBM MQ queue manager is vulnerable to denial of serviceIBM MQ
- CVE-2026-54251netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Servicenetty-incubator-codec-ohttp · io.netty.incubator netty-i… +1
- CVE-2026-12354IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injectionIBM MQ
- CVE-2026-12355IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code executionIBM MQ
- CVE-2026-12358Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-44300OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injectionopencost · github.com/opencost/opencost
- CVE-2026-12666IBM MQ Java messaging is vulnerable to XML external entity injectionIBM MQ
- CVE-2026-12667IBM MQ .NET client is vulnerable to XML external entity injectionIBM MQ
- CVE-2026-12728IBM MQ Java messaging is vulnerable to remote code executionIBM MQ
- CVE-2026-88765Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabGitLab
- CVE-2026-12752Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026IBM Business Automation Workflow containers and traditional
- CVE-2026-21588This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1…Atlassian Confluence Data Center
- CVE-2026-21587This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.Atlassian Jira Service Management Data Center
- CVE-2026-21586This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0…Atlassian Confluence Data Center
- CVE-2026-58201Lokka: Azure Resource Manager URL path validation issuemerill lokka · @merill/lokka
- CVE-2026-81897Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_controlConcrete CMS
- CVE-2026-81896Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question LabelConcrete CMS
- CVE-2026-63443Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and writecoder · github.com/coder/coder/v2 +1
- CVE-2026-18111Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity…Concrete CMS
- CVE-2026-81895Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`Concrete CMS
- CVE-2026-59160Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/runDerYeger yeger · @yeger/turbo-graph
- CVE-2026-81894Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption fieldConcrete CMS
- CVE-2026-55691EmbedVideo Extension : Stored XSS via unsanitized class passed to templateStarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…
- CVE-2026-55690EmbedVideo Extension: Stored XSS via unsanitized service name in exception textStarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…
- CVE-2026-18110Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint…Concrete CMS
- CVE-2026-55692EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabledStarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…
- CVE-2026-55149Vouch Proxy: Unbounded Multipart Cookie Allocation DoSvouch-proxy · github.com/vouch/vouch-proxy
- CVE-2026-58200@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signingjhb-software payload-plugins · @jhb.software/payload-cloudi…
- CVE-2026-19780Koha Eval Code Injection Remote Code Execution VulnerabilityKoha
- CVE-2026-59965@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omissionjhb-software payload-plugins · @jhb.software payload-alt… +1
- CVE-2026-55887MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gatewaydocker mcp-gateway · github.com/docker/mcp-gateway
- CVE-2026-55864GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Toolcore-geonetwork · org.geonetwork-opensource:gn-web-app
- CVE-2026-19407GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDKGoogle Cloud Gemini Enterprise Agent Platform SDK for Python
- CVE-2026-87792Multiple authorization bypass in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-91992Tornado before 6.5.7 Credential Leak via Handle Reusetornadoweb tornado · tornado
- CVE-2026-65831ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file readArcadeData arcadedb · com.arcadedb arcadedb-server +1
- CVE-2026-91990Tornado before 6.5.8 Memory Amplification DoS via multiparttornadoweb tornado · tornado
- CVE-2026-91989atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.pydep0we atomic-agents-stack · atomic-agents-stack
- CVE-2026-91987atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Modeldep0we atomic-agents-stack · atomic-agents-stack
- CVE-2026-91985Vikunja before 2.6.0 Privilege Escalation via Link Share Hashgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91973Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuthgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91972Vikunja before 2.6.0 Authentication Bypass via Unthrottled APIgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91971Vikunja before 2.6.0 Denial of Service via Avatar Uploadgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91965WWBN AVideo through 29.0 Broken Access Control via Live EndpointsWWBN AVideo
- CVE-2026-91964FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingTokenFreeRDP
- CVE-2026-91963FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrcFreeRDP
- CVE-2026-91961FreeRDP before 3.31.0 Denial of Service via URBDRCFreeRDP
- CVE-2026-91956FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRCFreeRDP
- CVE-2026-91955FreeRDP before 3.31.0 Denial of Service via Desktop DimensionsFreeRDP
- CVE-2026-91954FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodecFreeRDP
- CVE-2026-91953FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFOFreeRDP
- CVE-2026-91952FreeRDP before 3.31.0 Denial of Service via pool_decode_rectFreeRDP
- CVE-2026-91951FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrcFreeRDP
- CVE-2026-91950FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 WraparoundFreeRDP
- CVE-2026-91948FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOLFreeRDP
- CVE-2026-91947FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVCFreeRDP
- CVE-2026-91946FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphicsFreeRDP
- CVE-2026-91945FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATRFreeRDP
- CVE-2026-91943Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategyunclecode crawl4ai
- CVE-2026-91941Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategyunclecode crawl4ai
- CVE-2026-91940crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategyunclecode crawl4ai
- CVE-2026-91938Flowise before 3.1.4 Server-Side Request Forgery via document loadersFlowiseAI Flowise
- CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionIdFlowiseAI Flowise
- CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model NodesFlowiseAI Flowise
- CVE-2026-91934Flowise before 3.1.4 Remote Code Execution via SQL Database ChainFlowiseAI Flowise
- CVE-2026-91933Flowise before 3.1.4 Authorization Bypass via openai-realtimeFlowiseAI Flowise
- CVE-2026-91932Flowise before 3.1.4 Remote Code Execution via cwd ParameterFlowiseAI Flowise
- CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npxFlowiseAI Flowise
- CVE-2026-91930Flowise before 3.1.4 Cross-Tenant Organization Admin TakeoverFlowiseAI Flowise
- CVE-2026-91929Flowise before 3.1.4 Cross-Tenant Authorization BypassFlowiseAI Flowise
- CVE-2026-54077ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated usersArcadeData arcadedb · com.arcadedb arcadedb-engine +1
- CVE-2026-54076ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)ArcadeData arcadedb · com.arcadedb arcadedb-engine +1
- CVE-2026-59973mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapiagentfront frontmcp · agentfront mcp-from-openapi +4
- CVE-2026-87791Path traversal vulnerability in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-85013Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharactersRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-55178GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile…geolens-io geolens · @geolens/sdk +2
- CVE-2026-53966XWiki Platform: Privilege escalation from edit to script right through Live Data editingxwiki-platform · org.xwiki.platform:xwiki-platform-livedata…
- CVE-2026-53957Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to…contentful-mcp-server · @contentful mcp-server +3
- CVE-2026-54167Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host headertektoncd pipelines-as-code · github.com/openshift-pipelines…
- CVE-2026-57586CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Executionnaranor agent-coderag · agent-coderag
- CVE-2026-89025Hirschmann HiOS Switch Platform DoS via Malformed HTTP RequestBelden Hirschmann HiOS Switch Platform
- CVE-2026-90650MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'jetmonsters MotoPress Hotel Booking
- CVE-2026-16141OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge ValueOpenBMC phosphor-net-ipmid
- CVE-2026-16140OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1OpenBMC phosphor-net-ipmid
- CVE-2026-14805Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAXStylemixThemes Consulting - Business, Finance WordPress The…
- CVE-2026-92076Incorrect boundary conditions in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92074Mitigation bypass in the Popup Blocker componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92073Privilege escalation in the Enterprise Policies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92072Incorrect boundary conditions in the Safe Browsing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92067Use-after-free in the Widget: Gtk componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92065Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92064Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92062Privilege escalation in the Session Restore componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92060Use-after-free in the Internationalization componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92058Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92056Use-after-free in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92055Privilege escalation in the DevTools componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92054Privilege escalation in the Memory componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92053Privilege escalation in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92052Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92049Use-after-free in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92047Privilege escalation in the Crash Reporting componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92046Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92044Information disclosure in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92043Privilege escalation due to incorrect boundary conditions in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92042Race condition in the DOM: Content Processes componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92040Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92033Privilege escalation in Firefox for AndroidMozilla Firefox
- CVE-2026-92029Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92028Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92027Use-after-free in the DOM: Streams componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92026Use-after-free in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92025Use-after-free in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92024Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92023Use-after-free in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92022Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92021Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92020Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92019Mitigation bypass in the Remote Settings Client componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92017Privilege escalation in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92016Use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92015Privilege escalation in the WebExtensions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92014Privilege escalation due to incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92013Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92012Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92011Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92010Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92009Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92008Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92007Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92006Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-91996lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpointdromara lamp-cloud
- CVE-2026-91994Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requestssemaphoreui semaphore
- CVE-2026-91925Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Enginepolyaxon
- CVE-2026-91924pgweb through 0.17.0 Missing Authorization on Direct Connect Endpointsosedoff pgweb
- CVE-2026-91923KubeSphere through 4.1.3 SSRF via git credential verification endpointkubesphere
- CVE-2026-1758Session FixationSecomea GateManager
- CVE-2026-52827Kimai: Two-factor authentication bypass on the Kimai APIkimai · kimai/kimai
- CVE-2026-57133PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingMervinPraison PraisonAI · praisonai
- CVE-2026-57135PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsMervinPraison PraisonAI · praisonai
- CVE-2026-57134PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationMervinPraison PraisonAI · praisonai
- CVE-2026-57136PraisonAI SandboxExecutor allowedCommands bypass via shell chainingMervinPraison PraisonAI · praisonai
- CVE-2026-57137PraisonAI AgentLoop onToolCall approval runs after tool executionMervinPraison PraisonAI · praisonai
- CVE-2026-57112PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsMervinPraison PraisonAI · MervinPraison praisonaiagents +2
- CVE-2026-47426OpenAM OAuth Client Impersonation via JWKS Resolver CacheOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-47424OpenAM Authenticated RCE via Groovy Sandbox EscapeOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-41573OpenAM LDAP Injection via `_queryId` ParameterOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-19515OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command ExecutionWSO2 Integrator: MI for Visual Studio Code
- CVE-2026-46623OpenAM Account Takeover via Unverified Password Change in OAuth2 ModuleOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-46498OpenAM Arbitrary OAuth Token Minting via Push RegistrationOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45794OpenAM Unsafe Java Deserialization via SNSOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45048OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPCOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-44203OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-53660OpenAM Insecure SSO Cookie InitializationOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-44793OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-80217Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode…LITE-ON Technology FF-RFI079I4 · LITE-ON Technology FF-RFI0…
- CVE-2026-77853Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4.LITE-ON Technology FF-RFI079I4 · LITE-ON Technology FF-RFI0…
- CVE-2026-76159Duplicati for Windows - Incorrect Permission Assignment for Critical ResourceDuplicati
- CVE-2026-91846MISP Collection Element Add Missing Authorization on Referenced Object UUIDMISP
- CVE-2026-75092Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load…Red Hat Enterprise Linux · Red Hat OpenStack Platform
- CVE-2026-91825MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During EditMISP
- CVE-2026-91778In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including…Octopus Deploy Octopus Server
- CVE-2026-75983Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via…arraytics Eventin – Event Calendar, Tickets, Registration,…
- CVE-2026-88262Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass.bizwell xClick
- CVE-2026-91771Weights & Biases wandb before 0.29.0 Path Traversal via File Downloadwandb
- CVE-2026-91770IceHRM before 36.0.0 Broken Access Control via Employee IDgamonoid icehrm
- CVE-2026-91752GNU libextractor before 1.15 Stack Overflow via OLE2GNU libextractor
- CVE-2026-91751Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST APIflextype
- CVE-2026-91750WeKnora before 0.7.0 SSRF via Unvalidated HTTP RedirectsTencent WeKnora
- CVE-2025-66974An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a…
- CVE-2026-51134The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in…
- CVE-2026-52484An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the…
- CVE-2026-79410Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce…
- CVE-2026-79411Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding…
- CVE-2026-79425An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan…
- CVE-2026-79551Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
- CVE-2026-88616An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the…
- CVE-2026-886191024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module.
Medium, low and unrated 390
- CVE-2026-92184ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgeryag-ui-protocol ag-ui
- CVE-2026-73460Security Advisory 0160Arista Networks EOS
- CVE-2025-11395Podman: arbitrary file write when importing oci archiveRed Hat Enterprise Linux · Red Hat Hardened Images +2
- CVE-2026-92257Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() SinksNetcore NR255-V
- CVE-2026-92255Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API MisuseNetcore NR255-V
- CVE-2026-76873Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname FieldsNetcore NR255-V
- CVE-2026-76872Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management PagesNetcore NR255-V
- CVE-2026-76868Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_portNetcore NR255-V
- CVE-2026-76867Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI HandlersNetcore NR255-V
- CVE-2026-76865Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter HandlersNetcore NR255-V
- CVE-2026-76864Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule NamesNetcore NR255-V
- CVE-2026-76863Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan RoutesNetcore NR255-V
- CVE-2026-76858Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgiNetcore NR255-V
- CVE-2026-82567mySCADA myPRO Manager Missing AuthorizationmySCADA Technologies mySCADA myPRO
- CVE-2026-92259Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache…Samsung Opensource Escargot
- CVE-2026-92114a2ui-project a2ui Basic Catalog safe_regex.ts redosa2ui-project a2ui
- CVE-2026-73444On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated…Arista Networks EOS
- CVE-2026-19655On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information…Arista Networks EOS
- CVE-2026-92234QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation ErrorsWebkul QloApps
- CVE-2026-91719Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.Google Chrome
- CVE-2026-91730Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-91713Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-91739Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-91725Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a…Google Chrome
- CVE-2026-91714Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak…Google Chrome
Show all 390 entriesShow fewer entries
- CVE-2026-91742Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering…Google Chrome
- CVE-2026-91732Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-91723Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML…Google Chrome
- CVE-2026-91746Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a…Google Chrome
- CVE-2026-91740Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted…Google Chrome
- CVE-2026-91708Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-91717Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive…Google Chrome
- CVE-2026-91747Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-91720Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-91744Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-91726Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the…Google Chrome
- CVE-2026-66372Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-81927Concrete CMS before 9.5.3 is vulnerable to Stored XSS via SVG upload in "Reject" sanitization modeConcrete CMS
- CVE-2026-68953Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-18426Concrete CMS 9.0.0 to 9.5.2 Express Form block missing authorization allows an authenticated editor to modify Express Forms they cannot editConcrete CMS
- CVE-2026-92237Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and…Devolutions PowerShell Universal
- CVE-2026-81926Concrete CMS 9.4.0 through 9.5.2 is vulnerable to Cross-site scripting in the location panel duplicate-path confirmation dialogConcrete CMS
- CVE-2026-81925Concrete CMS below 9.5.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via Conversation Custom Date FormatConcrete CMS
- CVE-2026-87285Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87284Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87283Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87282Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87281Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87280Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87279Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87278Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87275Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87274Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87267Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87253Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client).Oracle Agile PLM
- CVE-2026-87252Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-87248Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87169Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Wage…Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-83491Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).Oracle iRecruitment
- CVE-2026-83488Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security).Oracle Helidon
- CVE-2026-83480Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket).Oracle Helidon
- CVE-2026-83460Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA).Oracle Helidon
- CVE-2026-83459Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart).Oracle Helidon
- CVE-2026-83458Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON).Oracle Helidon
- CVE-2026-89027miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication DowngrademiniOrange JWT Authentication for WP REST APIs
- CVE-2026-83443Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations).Oracle Assets
- CVE-2026-83441Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83433Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics).Oracle Depot Repair
- CVE-2026-83431Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI).Oracle Product Workbench
- CVE-2026-83419Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component…Oracle Communications Cloud Native Core Security Edge Prote…
- CVE-2026-83416Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83414Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83413Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83369Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Access SDK).Oracle Access Manager
- CVE-2026-83354Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83347Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83346Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).Oracle Fusion Middleware Control
- CVE-2026-83279Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).Oracle Agile PLM MCAD Connector
- CVE-2026-83278Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j).Oracle Helidon
- CVE-2026-83274Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).Oracle Agile PLM MCAD Connector
- CVE-2026-76796Newell Brands DYMO Connect Desktop improper file path validationNewell Brands DYMO Connect Desktop
- CVE-2026-83251Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83250Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83200Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle Process Manufacturing Intelligence
- CVE-2026-83198Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83175Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83140Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83109Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83097Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83077Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83076Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle HR Intelligence
- CVE-2026-73965Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway).Oracle Siebel CRM Deployment
- CVE-2026-70755Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download).Oracle Web Applications Desktop Integrator
- CVE-2026-62597Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).Oracle Enterprise Manager Base Platform
- CVE-2026-18425IDOR in Concrete CMS 9.0.0 through 9.5.2 dashboard sitemap reorder (SitemapUpdate::updateDisplayOrder) allows an authenticated sitemap…Concrete CMS
- CVE-2026-18424Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use…Concrete CMS
- CVE-2026-32599Netmaker has a boolean‑based SQL Injectiongravitl netmaker · github.com/gravitl/netmaker
- CVE-2026-88922Go-getter vulnerable to a privilege escalation issue in its archive decompression handlingHashiCorp Shared library
- CVE-2026-18423Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and…Concrete CMS
- CVE-2026-69206Http4s: DigestAuth allows replay of captured requestshttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-18422Concrete CMS below 9.5.3 Multilingual Page Assign Action Lacks Destination Authorization and CSRF Token ValidationConcrete CMS
- CVE-2026-76707Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76706Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive dataHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76705Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76704Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76703Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes…Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76702Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76701Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76700Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76699Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76698Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76697Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management InterfaceHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76696Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76695Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76694Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-69215Http4s: CookieJar middleware matches by substring, leaking cookies cross-originhttp4s · org.http4s:http4s-client_2.12 +2
- CVE-2026-84850Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16…Devolutions Server
- CVE-2026-18421Concrete CMS 9.0.0-9.5.2 Boards data source dashboard is missing an authorization check, allowing a low-privileged board editor to modify…Concrete CMS
- CVE-2026-69212Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirecthttp4s
- CVE-2026-90969Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user…Devolutions Server
- CVE-2026-68529Concrete CMS 9.0.0 through 9.5.2 us missing authorization in the Express entries advanced-search dashboard action allowing a…Concrete CMS
- CVE-2026-84048Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2joomgalleryfriends.net JoomGallery extension for Joomla
- CVE-2026-90971Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a…Devolutions Server
- CVE-2026-68530Concrete CMS 9.0.0 through 9.5.2 is Missing Authorization on Board Instance Actions Allowed a Board Editor to Access and Delete Other…Concrete CMS
- CVE-2026-69214Http4s: CookieJar middleware accepts arbitrary Set-Cookie domainhttp4s · org.http4s:http4s-client_2.12 +2
- CVE-2026-68531Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword SearchConcrete CMS
- CVE-2026-69201Http4s: ResourceService and Webjar Service path escape via percent-encoded separatorshttp4s · org.http4s:http4s-server_2.12 +2
- CVE-2026-69216Http4s: Ember chunk parser lenience (TE.TE request smuggling)http4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69211Http4s: Set-Cookie rendering does not escape attribute delimitershttp4s
- CVE-2026-81924Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Theme Page Template ActivationConcrete CMS
- CVE-2026-82190Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-81923Concrete CMS below 9.5.3 is missing authorization in the SEO Bulk Update Meta Tags editorConcrete CMS
- CVE-2026-81922"In Concrete CMS below 9.5.3, there is Missing authorization in the sitemap page reorder allowing low-privilege users to reorder arbitrary…Concrete CMS
- CVE-2026-82191Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22…j2commerce.com J2Store extension for Joomla
- CVE-2026-81921In Concrete CMS 8.5.3 to 9,5,2, OAuth 2.0 Refresh-Token Grant Bypasses Account StatusConcrete CMS
- CVE-2026-81920Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Dashboard SEO Excluded Words Reset EndpointConcrete CMS
- CVE-2026-73467On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller…Arista Networks EOS
- CVE-2026-68532Concrete CMS 9.0.0 to 9.5.2 is vunerable to CSRF in Concrete CMS Group Type Deletion Dashboard ActionConcrete CMS
- CVE-2026-73466On affected platforms running Arista EOS, under certain circumstances plaintext user passwordsArista Networks EOS
- CVE-2026-73465On affected platforms running Arista EOS, under certain circumstances plaintext private keysArista Networks EOS
- CVE-2026-58773In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58767In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-58765In GPU, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58755In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-58751In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-58747In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58739In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy.Google Android
- CVE-2026-58731In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data.Google Android
- CVE-2026-58726In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58721In multiple locations, there is a possible information disclosure due to uninitialized memory use.Google Android
- CVE-2026-58718In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation.Google Android
- CVE-2026-58716In multiple locations, there is a possible time-of-check to time-of-use due to a race condition.Google Android
- CVE-2026-58698In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-57042In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-57035In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-57006In acfw_ffa.c, there is a possible secret read due to a logic error in the code.Google Android
- CVE-2026-56992In multiple files, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-56989In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56988In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-56979In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-56975In Cellular Modem, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-56973In multiple locations, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-56972In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-56964In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-56958In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-56950In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation.Google Android
- CVE-2026-56932In Trusted Execution Environment, there is a possible memory corruption due to improper input validation.Google Android
- CVE-2026-56923In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-56922In CPM, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-56915In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition.Google Android
- CVE-2026-56907In VPU, there is a possible shared memory overwrite due to improper input validation.Google Android
- CVE-2026-56892In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check.Google Android
- CVE-2026-56889In multiple locations, there is a possible permission bypass due to an integer overflow.Google Android
- CVE-2026-56888In multiple locations, there is a possible permission bypass due to side channel information disclosure.Google Android
- CVE-2026-56879In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy.Google Android
- CVE-2026-55365In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-55332In multiple locations, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-55317In printf of printf.c, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-55304In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-55302In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-0197In VPU, there is a possible information dislclosure due to a logic error in the code.Google Android
- CVE-2026-0192In Bootloader, there is a possible escalation of privilege due to a missing permission check.Google Android
- CVE-2026-0187In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-0186In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-0183In CPM, there is a possible information disclosure due to a confused deputy.Google Android
- CVE-2026-0179In Bootloader, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-0177In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-68533Missing Authorization in Concrete CMS versions below 9.5.3 Conversation File Upload Allows File Import Without the Add Message Attachments…Concrete CMS
- CVE-2026-68534Concrete CMS below 9.5.2 is vulnerable to Stored XSS via unescaped Express entry labels in association selectorsConcrete CMS
- CVE-2026-81919Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Block Arrangement EndpointConcrete CMS
- CVE-2026-19641On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan…Arista Networks EOS
- CVE-2026-73451On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces…Arista Networks EOS
- CVE-2026-19504Fabric.js loadFromJSON Server-Side Request Forgery VulnerabilityFabric.js
- CVE-2026-57442MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nestedbitbonsai mcpvault · @bitbonsai/mcpvault
- CVE-2026-81237Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability.Dell Wyse Management Suite
- CVE-2026-54688mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)ihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-54689mcp-searxng hardened-mode SSRF bypasses permit internal URL accessihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-56830Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorizationshopperlabs shopper · shopper/framework
- CVE-2026-56831Shopper: Negative discount values accepted and propagated through order calculation pipelineshopperlabs shopper · shopper/framework
- CVE-2026-12910Missing Authentication for Critical Function in GitLabGitLab
- CVE-2026-82837Insertion of Sensitive Information Into Sent Data in GitLabGitLab
- CVE-2026-55374canto-saas-api: Authenticated API requests can be redirected via unencoded path variablesjleehr canto-saas-api · jleehr/canto-saas-api
- CVE-2026-55375canto-saas-api: OAuth credentials exposed in URL query string and exception messagesjleehr canto-saas-api · jleehr/canto-saas-api
- CVE-2026-11864Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-11918IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structuresIBM ContextForge MCP Gateway
- CVE-2026-11927Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-53954Bugsink: DOS using large numbers of event tagsbugsink
- CVE-2026-48785Apptainer: Incorrect path matching for 'limit container paths' directiveapptainer · github.com/apptainer/apptainer
- CVE-2026-55226Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operatorstrimzi-kafka-operator · io.strimzi:strimzi
- CVE-2026-54050Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Imagesakaiproject sakai · org.sakaiproject.profile2:profile2-… +1
- CVE-2026-12742Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026IBM Business Automation Workflow containers and traditional
- CVE-2026-12749Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-12750Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-12751Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-53941Inspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoSinspektor-gadget · github.com/inspektor-gadget/inspektor-ga…
- CVE-2026-44778Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELFinspektor-gadget · github.com/inspektor-gadget/inspektor-ga…
- CVE-2026-55863motionEye: Missing authentication on ActionHandler allows unauthenticated camera action executionmotioneye-project motioneye · motioneye
- CVE-2026-91855Open5GS PFCP Message handler.c denial of serviceOpen5GS
- CVE-2026-54503plone.app.textfield: Stored XSS by spoofing mime typeplone.app.textfield · plone-app-textfield
- CVE-2026-53658Fabric CA: LDAP Injection via Unescaped Username in GetUser Filterhyperledger fabric-ca · github.com/hyperledger/fabric-ca
- CVE-2026-54561MCP Memory Keeper: Arbitrary local file read in mcp-memory-keeper context_import via unvalidated filePathmkreyman mcp-memory-keeper · mcp-memory-keeper
- CVE-2026-91854code-projects Record Management System reg.php cross site scriptingcode-projects Record Management System
- CVE-2026-79699Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directoryRed Hat Ansible Automation Platform · Red Hat Enterprise… +5
- CVE-2026-79705Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callersRed Hat Hardened Images · Red Hat Ansible Automation Pla… +5
- CVE-2026-91853TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injectionTOTOLINK X5000R
- CVE-2026-58196ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)stacklok toolhive · github.com/stacklok/toolhive
- CVE-2026-54450ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gatewaystacklok toolhive · github.com/stacklok/toolhive
- CVE-2026-59157webhookd: Unrestricted HTTP Header to Shell Variable Injectionncarlier webhookd · github.com/ncarlier/webhookd
- CVE-2026-55770OpenBao: LDAPi ldaputil (wrong escape func)openbao · github.com/openbao/openbao
- CVE-2026-55776OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key typesopenbao · github.com/openbao/openbao
- CVE-2026-55774OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808openbao · github.com/openbao/openbao
- CVE-2026-55775OpenBao's System Backend allows Unauthorized Management of the containing Namespaceopenbao · github.com/openbao/openbao
- CVE-2026-44163fluent-plugin-opentelemetry: Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`fluent-plugins-nursery fluent-plugin-opentelemetry · fluent…
- CVE-2026-55591Signal K Server: Server-Side Request Forgery via Remote Connection Endpointssignalk-server
- CVE-2026-55630Kiwi TCMS: Stored XSS via javascript: URI in extra_link field (TestPlan & TestCase)kiwitcms Kiwi · kiwitcms
- CVE-2026-54724Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpointkiwitcms Kiwi · kiwitcms
- CVE-2026-91849WuzhiCMS Avatar Upload index.php setAvatar unrestricted uploadWuzhiCMS
- CVE-2026-55636Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotectedprojectcapsule capsule · github.com/projectcapsule/capsule
- CVE-2026-44282Election question titles allow stored script executiondecidim · decidim-elections
- CVE-2026-89307HTML injection allows open redirection in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-87793Reflected XSS in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-91991Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargstornadoweb tornado · tornado
- CVE-2026-91986gitoxide gix-transport before 0.59.2 CR/LF/NUL InjectionGitoxideLabs gitoxide
- CVE-2026-91984Vikunja before 2.6.0 Broken Object-Level Authorization via task-positiongo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91983Vikunja before 2.6.0 API Token Scope Bypass via expand Parametergo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91982Vikunja before 2.6.0 TOTP Secret Disclosure via APIgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91981Vikunja before 2.6.0 User Enumeration via v2 APIgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91980vikunja before 2.6.0 Team Enumeration via Project Sharego-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91979Vikunja before 2.6.0 Denial of Service via Decompression Bombgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91970Vikunja before 2.6.0 Resource Exhaustion via Planka Migrationgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91969vikunja before 2.6.0 Resource Exhaustion via CSV Migrationgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91968vikunja before 2.6.0 Denial of Service via unbounded filter recursiongo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91967AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURLWWBN AVideo
- CVE-2026-91966AVideo through 29.0 Unauthenticated SSRF via Host HeaderWWBN AVideo
- CVE-2026-91962FreeRDP before 3.31.0 Integer Overflow via audin Apple backendsFreeRDP
- CVE-2026-91960FreeRDP before 3.31.0 Integer Overflow Double FreeFreeRDP
- CVE-2026-91959FreeRDP before 3.31.0 Buffer Over-read via RTS GatewayFreeRDP
- CVE-2026-91958FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor IndexFreeRDP
- CVE-2026-91957FreeRDP before 3.31.0 Use-After-Free via smartcard workerFreeRDP
- CVE-2026-91944crawl4ai before 0.9.3 DOM-based XSS via Playground UIunclecode crawl4ai
- CVE-2026-91942crawl4ai before 0.9.3 Cross-Site Scripting via innerHTMLunclecode crawl4ai
- CVE-2026-91936Flowise before 3.1.4 Script Injection via Docker WorkflowsFlowiseAI Flowise
- CVE-2024-58384Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClienttornadoweb tornado · tornado
- CVE-2026-91848WuzhiCMS index.php getDataOfJson sql injectionWuzhiCMS
- CVE-2026-55828qbee transport: Symlink-chain path traversal in tar extraction (one level outside destination)qbee-io transport · go.qbee.io/transport
- CVE-2026-47215Singularity: Incorrect path matching for 'limit container paths' directivesylabs singularity · sylabs SingularityPRO +2
- CVE-2026-55701OpenTelemetry githubreceiver silently ignores configured required_headers authenticationopen-telemetry opentelemetry-collector-contrib · github.com…
- CVE-2026-50024GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git serverWangYihang GitHacker · githacker
- CVE-2026-91842OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserializationOpenBankProject OBP-API
- CVE-2026-50166Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configuredkumahq kuma · github.com/kumahq/kuma +1
- CVE-2026-52724kuma-dp connects to control plane without verifying TLS certificate when no CA is configuredkumahq kuma · github.com/kumahq/kuma +1
- CVE-2026-55617Hydro: Insufficient session expiration when recreating sessionshydro-dev Hydro · hydrooj
- CVE-2026-91836OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factorsOpenClaw ClawScan
- CVE-2026-47780free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistencefree5gc · github.com/free5gc/udr
- CVE-2026-48987pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManagerpyload · pyload-ng
- CVE-2026-48737pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPspyload · pyload-ng
- CVE-2026-55650Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposureouterbase studio · @outerbase/studio
- CVE-2026-54254Cyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sitescyberdrop-dl · cyberdrop-dl-patched
- CVE-2026-49446Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Serverazukaar Cosmos-Server · github.com/azukaar/cosmos-server
- CVE-2026-54168Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolutiontektoncd pipelines-as-code · github.com/openshift-pipelines…
- CVE-2026-90439NGINX ngx_http_v3_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-91835OpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflictOpenClaw ClawScan
- CVE-2026-48722Nextflow: Incorrect default permissions in the nextflow auth login commandnextflow-io nextflow · io.nextflow:nextflow
- CVE-2026-49254Dragonfly Manager OAuth provider client_secret disclosure via unauthenticated GET /api/v1/oauthdragonflyoss dragonfly · d7y.io/dragonfly/v2
- CVE-2026-54637Dragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFiledragonflyoss dragonfly · d7y.io/dragonfly/v2
- CVE-2026-92082Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attemptsPayara Server
- CVE-2026-15609Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line'…QODE Bridge - Creative Multipurpose WordPress Theme
- CVE-2026-92078Denial-of-service in the Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92077Denial-of-service in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92070Information disclosure in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92069Spoofing issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92068Site isolation issue in the Reader Mode componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92063Denial-of-service in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92039Mitigation bypass in the DOM: Notifications componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92031Information disclosure in the Graphics: ImageLib componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92030Mitigation bypass in the DOM: Copy & Paste and Drag & Drop componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92005Use-after-free in the Audio/Video: Web Codecs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-91926Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challengeRed Hat Enterprise Linux
- CVE-2026-92003MISP Unthrottled Authentication Failure Log Writes Enable Resource ExhaustionMISP
- CVE-2026-91997evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypassevolution-foundation evolution-api
- CVE-2026-91993Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-listdromara Jpom
- CVE-2026-92002MISP: Authentication failure logging suppressed during Redis unavailabilityMISP
- CVE-2026-91786Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer sizeRed Hat Enterprise Linux
- CVE-2026-91922Steedos Platform through 3.0.15-beta.47 Reflected XSS via page rendersteedos-platform
- CVE-2026-1759Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation.Secomea GateManager
- CVE-2026-80489EUC_JISX0213 decoding may hang on crafted inputThe GNU C Library glibc
- CVE-2026-77117SHIFT_JISX0213 decoding may hang on crafted inputThe GNU C Library glibc
- CVE-2026-52822Kimai: Improper Authorization in Kimai Timesheet Restart and Duplicate Allows New Timesheets After Project Access Revocationkimai · kimai/kimai
- CVE-2026-52828Kimai: ExportTemplate CRUD Missing Authorization Check Allows Unauthorized TEAMLEAD Accesskimai · kimai/kimai
- CVE-2026-52826Kimai: Improper Authorization in Kimai Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate Manipulationkimai · kimai/kimai
- CVE-2026-52823Kimai: Login CSRF in Kimai Timesheet Stop and Restart API Endpoints Allows Unauthorized State Changeskimai · kimai/kimai
- CVE-2026-86818fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronizationfast-uri
- CVE-2026-52825Kimai: Improper Authorization in Kimai Team Member and Team Activity Assignment APIs Allows Expansion of Team Scope Beyond Authorized…kimai · kimai/kimai
- CVE-2026-52821Kimai: Improper Authorization in Kimai Activity Creation with Preset Project Allows Creation Under Unauthorized Projectskimai · kimai/kimai
- CVE-2026-52820Kimai: Timesheet PATCH/POST allows assigning to project outside user's team via query_builder OR-bypasskimai · kimai/kimai
- CVE-2026-52819Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the…kimai · kimai/kimai
- CVE-2026-86472fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsfast-uri
- CVE-2026-62280OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent pageOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2025-13166Username Enumeration via SMS OTP Flow in WSO2 Identity Server Allows User Account DiscoveryWSO2 Identity Server
- CVE-2025-5802Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account DiscoveryWSO2 API Manager · WSO2 API Control Plane +7
- CVE-2026-44202OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-91859MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter PassMISP
- CVE-2026-59341Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpointsBitnami sealed-secrets
- CVE-2026-91857MISP: State-changing actions accessible via GET request enabling CSRFMISP
- CVE-2026-91782GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereferenceGNU Binutils
- CVE-2026-91851MISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coercion in Permission Flag ComparisonMISP
- CVE-2026-91826Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption…Samsung Opensource rLottie
- CVE-2026-91781GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereferenceGNU Binutils
- CVE-2026-91780GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereferenceGNU Binutils
- CVE-2026-91779GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereferenceGNU Binutils
- CVE-2026-91091GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruptionGPAC
- CVE-2026-91819MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponentMISP
- CVE-2026-91090GPAC base_scenegraph.c gf_node_activate_ex stack-based overflowGPAC
- CVE-2026-91089GPAC base_scenegraph.c gf_node_get_name_and_id use after freeGPAC
- CVE-2026-18063Job Postings <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position_button' Parameterblueglassch Job Postings
- CVE-2026-91088GPAC URL url.c gf_url_concatenate_ex heap-based overflowGPAC
- CVE-2026-91087GPAC Compositor media_object.c gf_mo_get_od_id use after freeGPAC
- CVE-2026-91086GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflowGPAC
- CVE-2026-91005SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted uploadSourceCodester Online Faculty Clearance System
- CVE-2026-15402Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameterarraytics Eventin – Event Calendar, Tickets, Registration,…
- CVE-2026-89141AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parametertigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
- CVE-2026-91004SourceCodester Online Faculty Clearance System delete_faculty1.php sql injectionSourceCodester Online Faculty Clearance System
- CVE-2026-18232WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindowWP Directory Kit
- CVE-2026-16592WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via ShortcodesWP Directory Kit
- CVE-2026-16593WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget SettingsWP Directory Kit
- CVE-2026-86701Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components.NTT DOCOMO BUSINESS ManabiPocket for Parents
- CVE-2026-17495moment vulnerable to Path Traversal via crafted non-string locale namemoment
- CVE-2026-81320Hawtio-operator: hawtio-operator: tls private key written to operator log at debug levelRed Hat build of Apache Camel - HawtIO
- CVE-2026-81303Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostnameRed Hat build of Apache Camel - HawtIO
- CVE-2026-91002stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authenticationstamparm maltrail
- CVE-2026-157583D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameteriberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer…
- CVE-2026-90881D-Link DIR-882 CGI Binary dllog.cgi main information disclosureD-Link DIR-882
- CVE-2026-90880D-Link DSL-3782 Diagnostics Diagnostics.asp system command injectionD-Link DSL-3782
- CVE-2026-90879zyx0814 FilePress Publish search.php sql injectionzyx0814 FilePress
- CVE-2026-90878vllm-project vLLM Jinja Template Rendering completions resource consumptionvllm-project vLLM
- CVE-2026-90877SourceCodester Online Faculty Clearance System update_requirement_status.php sql injectionSourceCodester Online Faculty Clearance System
- CVE-2026-90876SourceCodester Online Faculty Clearance System delete_requirement.php sql injectionSourceCodester Online Faculty Clearance System
- CVE-2026-90858subhajitkhan online-clinic-management-system adminappview.php session_start authorizationsubhajitkhan online-clinic-management-system
- CVE-2026-90857SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted uploadSourceCodester College Notes Gallery Management System
- CVE-2026-90856SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges managementSourceCodester College Notes Gallery Management System
- CVE-2026-90855SourceCodester/katojkalemba Online Food Ordering System order.php sql injectionSourceCodester Online Food Ordering System · katojkalemba O…
- CVE-2026-90854SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injectionSourceCodester Online Food Ordering System · katojkalemba O…
- CVE-2026-90852luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after freeluben zstd-jni
- CVE-2026-88261Improper input validation vulnerability in bizwell xClick allows Stored XSS.bizwell xClick
- CVE-2026-90851PHPGurukul Hostel Management System checklogin.php access controlPHPGurukul Hostel Management System
- CVE-2026-90850PHPGurukul Hostel Management System manage-students.php cross site scriptingPHPGurukul Hostel Management System
- CVE-2026-90849SourceCodester College Notes Gallery Management System login.php sql injectionSourceCodester College Notes Gallery Management System
- CVE-2026-91774Yao through v1.0.0-rc22 Missing Authorization via OpenAPI team endpointYaoApp yao
- CVE-2026-91773Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS Lockscharmbracelet soft-serve
- CVE-2026-91772Halo through 2.26.1 Open Redirect via Unvalidated URI Parameterhalo-dev halo
- CVE-2026-90848Governikus AusweisApp StartPAOSResponse cross site scriptingGovernikus AusweisApp
- CVE-2026-85657Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored…Co-Authors, Multiple Authors and Guest Authors in an Author…
- CVE-2026-85575The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5…roxnor ShopEngine Elementor WooCommerce Builder Addon – All…
- CVE-2026-90846PHPGurukul Daily Expense Tracker System forgot-password.php sql injectionPHPGurukul Daily Expense Tracker System
- CVE-2026-90845PHPGurukul Daily Expense Tracker System sidebar.php cross site scriptingPHPGurukul Daily Expense Tracker System
- CVE-2026-90844PHPGurukul Daily Expense Tracker System Login index.php sql injectionPHPGurukul Daily Expense Tracker System
- CVE-2026-90843SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injectionSabyasachiRana WebMap
- CVE-2026-25825An issue was discovered in Keyfactor SignServer before 7.6.0.
- CVE-2026-25826An issue was discovered in Keyfactor SignServer before 7.6.0.
- CVE-2026-25827An issue was discovered in Keyfactor SignServer before 7.6.0.
- CVE-2026-39038BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (trufflebox-ui) in…
- CVE-2026-39039In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the…
- CVE-2026-39040BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the component Trufflebox UI (trufflebox-ui) in…
- CVE-2026-51133Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary…
- CVE-2026-79409An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable…
- CVE-2026-886181024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality.
- CVE-2026-88620SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint.
- CVE-2026-88621OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload() method in class/Api.php.
- CVE-2026-88742Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.
- CVE-2026-88743Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.