CVEs

128,285 total · page 15 of 2,566

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-87358	Oracle Corporation Oracle E-Business Suite	Hig	0.46	7.1	0.00	Oct 20, 2026	Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-87357	Oracle Corporation Order Capture	Hig	0.47	7.2	0.00	Oct 20, 2026	Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Order…
CVE-2026-87356	Oracle Corporation Applications Platform Engineering	Hig	0.51	7.8	0.00	Oct 20, 2026	Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2026-87351	Oracle Corporation Goldengate	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to…
CVE-2026-87346	Oracle Corporation Oracle Fusion Middleware	Hig	0.57	8.7	0.00	Oct 20, 2026	Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated…
CVE-2026-87322	Oracle Corporation VM Virtualbox	Hig	0.55	8.4	0.00	Oct 20, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to the…
CVE-2026-87316	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.51	7.8	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-87315	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.49	7.5	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-87314	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.48	7.4	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to…
CVE-2026-87313	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to…
CVE-2026-87312	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.49	7.5	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with network access via…
CVE-2026-87310	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to…
CVE-2026-87309	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.53	8.1	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-87308	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.46	7.1	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-87307	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.46	7.1	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2026-87306	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.53	8.1	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to…
CVE-2026-87305	Oracle Corporation Jd Edwards Enterpriseone	Hig	0.53	8.1	0.00	Oct 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-87304	Oracle Corporation Fusion Middleware	Hig	0.56	8.6	0.00	Oct 20, 2026	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-87301	Oracle Corporation VM Virtualbox	Hig	0.55	8.4	0.00	Oct 20, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87300	Oracle Corporation Oracle Fusion Middleware	Hig	0.57	8.7	0.00	Oct 20, 2026	Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit…
CVE-2026-87296	Oracle Corporation Access Manager	Hig	0.49	7.5	0.00	Oct 20, 2026	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-87263	Oracle Corporation Oracle Business Intelligence Enterprise Edition	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2026-83426	Oracle Corporation Fusion Middleware	Hig	0.57	8.7	0.00	Oct 20, 2026	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-83409	Oracle Corporation Oracle Fusion Middleware	Hig	0.53	8.1	0.00	Oct 20, 2026	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-83407	Oracle Corporation Fusion Middleware	Hig	0.56	8.6	0.00	Oct 20, 2026	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-83404	Oracle Corporation Mysql Connectors	Hig	0.49	7.5	0.00	Oct 20, 2026	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL…
CVE-2026-83403	Oracle Corporation Oracle Fusion Middleware	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2026-83402	Oracle Corporation Oracle Fusion Middleware	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to…
CVE-2026-83398	Oracle Corporation Data Integrator	Hig	0.53	8.2	0.00	Oct 20, 2026	Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-83393	Oracle Corporation Product Hub	Hig	0.55	8.5	0.00	Oct 20, 2026	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-83379	Oracle Corporation Oracle Fusion Middleware	Hig	0.57	8.7	0.00	Oct 20, 2026	Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit…
CVE-2026-83370	Oracle Corporation E Business Suite	Hig	0.49	7.5	0.00	Oct 20, 2026	Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Sourcing. Successful…
CVE-2026-83367	Oracle Corporation Shipping Execution	Hig	0.48	7.4	0.00	Oct 20, 2026	Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to…
CVE-2026-83366	Oracle Corporation Shipping Execution	Hig	0.48	7.4	0.00	Oct 20, 2026	Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-83363	Oracle Corporation Contract Lifecycle Management for Public Sector	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2026-83361	Oracle Corporation Contract Lifecycle Management for Public Sector	Hig	0.53	8.1	0.00	Oct 20, 2026	Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2026-82891	IBM Guardium Data Protection	Hig	0.53	8.1	0.00	Oct 20, 2026	IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.
CVE-2026-76587	IBM Planning Analytics	Hig	0.57	8.8	0.01	Oct 20, 2026	IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
CVE-2026-60662	Oracle Corporation Solaris	Hig	0.51	7.8	0.00	Oct 20, 2026	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2026-47025	Oracle Corporation Solaris	Hig	0.57	8.8	0.00	Oct 20, 2026	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Successful…
CVE-2026-113776	Pypa Virtualenv	Hig	0.44	7.8	0.00	Oct 20, 2026	virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at a time across the complete activation template, so trigger names such as __VIRTUAL_NAME__,…
CVE-2026-113732	Pypa Virtualenv	Hig	0.44	7.8	0.00	Oct 20, 2026	virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even though fish interprets backslashes and single quotes differently. An attacker-influenced environment…
CVE-2026-113729	Moov Signedxml	Hig	0.42	7.5	0.00	Oct 20, 2026	Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before reference digest or signature checks.…
CVE-2026-113728	Bulwarkmail Webmail	Hig	0.42	7.5	0.01	Oct 20, 2026	Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname with one DNS lookup and then passes the URL to fetch, which performs a separate lookup for the socket…
CVE-2026-113727	Openchoreo openchoreo	Hig	0.41	7.4	0.00	Oct 20, 2026	OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a request using the openchoreo.dev/project and openchoreo.dev/component labels in the submitted body while selecting the stored…
CVE-2026-113726	Pypa Virtualenv	Hig	0.44	7.8	0.00	Oct 20, 2026	virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASH_VERSION…
CVE-2026-113704	—	Hig	0.40	7.3	0.00	Oct 20, 2026	A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push_notification_sender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to…
CVE-2026-113344	Google Chrome	Hig	0.57	8.8	0.00	Oct 20, 2026	Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113343	Google Chrome	Hig	0.57	8.8	0.00	Oct 20, 2026	Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113339	Google Chrome	Hig	0.57	8.8	0.00	Oct 20, 2026	Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87358HigOct 20, 2026
Oracle Corporation
Oracle E-Business Suite
risk 0.46cvss 7.1epss 0.00
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-87357HigOct 20, 2026
Oracle Corporation
Order Capture
risk 0.47cvss 7.2epss 0.00
Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Order…
CVE-2026-87356HigOct 20, 2026
Oracle Corporation
Applications Platform Engineering
risk 0.51cvss 7.8epss 0.00
Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2026-87351HigOct 20, 2026
Oracle Corporation
Goldengate
risk 0.57cvss 8.8epss 0.00
Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to…
CVE-2026-87346HigOct 20, 2026
Oracle Corporation
Oracle Fusion Middleware
risk 0.57cvss 8.7epss 0.00
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated…
CVE-2026-87322HigOct 20, 2026
Oracle Corporation
VM Virtualbox
risk 0.55cvss 8.4epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to the…
CVE-2026-87316HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.51cvss 7.8epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-87315HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.49cvss 7.5epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-87314HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.48cvss 7.4epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to…
CVE-2026-87313HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.57cvss 8.8epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to…
CVE-2026-87312HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.49cvss 7.5epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with network access via…
CVE-2026-87310HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.57cvss 8.8epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to…
CVE-2026-87309HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.53cvss 8.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-87308HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.46cvss 7.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-87307HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.46cvss 7.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2026-87306HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.53cvss 8.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to…
CVE-2026-87305HigOct 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.53cvss 8.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-87304HigOct 20, 2026
Oracle Corporation
Fusion Middleware
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-87301HigOct 20, 2026
Oracle Corporation
VM Virtualbox
risk 0.55cvss 8.4epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87300HigOct 20, 2026
Oracle Corporation
Oracle Fusion Middleware
risk 0.57cvss 8.7epss 0.00
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit…
CVE-2026-87296HigOct 20, 2026
Oracle Corporation
Access Manager
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-87263HigOct 20, 2026
Oracle Corporation
Oracle Business Intelligence Enterprise Edition
risk 0.57cvss 8.8epss 0.00
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2026-83426HigOct 20, 2026
Oracle Corporation
Fusion Middleware
risk 0.57cvss 8.7epss 0.00
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-83409HigOct 20, 2026
Oracle Corporation
Oracle Fusion Middleware
risk 0.53cvss 8.1epss 0.00
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-83407HigOct 20, 2026
Oracle Corporation
Fusion Middleware
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-83404HigOct 20, 2026
Oracle Corporation
Mysql Connectors
risk 0.49cvss 7.5epss 0.00
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL…
CVE-2026-83403HigOct 20, 2026
Oracle Corporation
Oracle Fusion Middleware
risk 0.57cvss 8.8epss 0.00
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2026-83402HigOct 20, 2026
Oracle Corporation
Oracle Fusion Middleware
risk 0.57cvss 8.8epss 0.00
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to…
CVE-2026-83398HigOct 20, 2026
Oracle Corporation
Data Integrator
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-83393HigOct 20, 2026
Oracle Corporation
Product Hub
risk 0.55cvss 8.5epss 0.00
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-83379HigOct 20, 2026
Oracle Corporation
Oracle Fusion Middleware
risk 0.57cvss 8.7epss 0.00
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit…
CVE-2026-83370HigOct 20, 2026
Oracle Corporation
E Business Suite
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Sourcing. Successful…
CVE-2026-83367HigOct 20, 2026
Oracle Corporation
Shipping Execution
risk 0.48cvss 7.4epss 0.00
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to…
CVE-2026-83366HigOct 20, 2026
Oracle Corporation
Shipping Execution
risk 0.48cvss 7.4epss 0.00
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-83363HigOct 20, 2026
Oracle Corporation
Contract Lifecycle Management for Public Sector
risk 0.57cvss 8.8epss 0.00
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2026-83361HigOct 20, 2026
Oracle Corporation
Contract Lifecycle Management for Public Sector
risk 0.53cvss 8.1epss 0.00
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2026-82891HigOct 20, 2026
IBM
Guardium Data Protection
risk 0.53cvss 8.1epss 0.00
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.
CVE-2026-76587HigOct 20, 2026
IBM
Planning Analytics
risk 0.57cvss 8.8epss 0.01
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
CVE-2026-60662HigOct 20, 2026
Oracle Corporation
Solaris
risk 0.51cvss 7.8epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2026-47025HigOct 20, 2026
Oracle Corporation
Solaris
risk 0.57cvss 8.8epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Successful…
CVE-2026-113776HigOct 20, 2026
Pypa
Virtualenv
risk 0.44cvss 7.8epss 0.00
virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at a time across the complete activation template, so trigger names such as __VIRTUAL_NAME__,…
CVE-2026-113732HigOct 20, 2026
Pypa
Virtualenv
risk 0.44cvss 7.8epss 0.00
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even though fish interprets backslashes and single quotes differently. An attacker-influenced environment…
CVE-2026-113729HigOct 20, 2026
Moov
Signedxml
risk 0.42cvss 7.5epss 0.00
Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before reference digest or signature checks.…
CVE-2026-113728HigOct 20, 2026
Bulwarkmail
Webmail
risk 0.42cvss 7.5epss 0.01
Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname with one DNS lookup and then passes the URL to fetch, which performs a separate lookup for the socket…
CVE-2026-113727HigOct 20, 2026
Openchoreo
openchoreo
risk 0.41cvss 7.4epss 0.00
OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a request using the openchoreo.dev/project and openchoreo.dev/component labels in the submitted body while selecting the stored…
CVE-2026-113726HigOct 20, 2026
Pypa
Virtualenv
risk 0.44cvss 7.8epss 0.00
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASH_VERSION…
CVE-2026-113704HigOct 20, 2026
risk 0.40cvss 7.3epss 0.00
A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push_notification_sender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to…
CVE-2026-113344HigOct 20, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113343HigOct 20, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113339HigOct 20, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)