boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Tuesday, August 18, 2026 · all times UTC← 2026-08-17 · archive · 2026-08-19 →

Security Box Score — August 18, 2026 — page 2

Edition of August 18, 2026, continued — page 2 of 3. Back to page 1 · page 3

Results (continued, ranked) — ranks 401–1000 of 1407
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2021-437185.329.7n/an/aCWE-288An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075…
CVE-2026-626368.629.5Oracle CorporationOracle Reports DeveloperCWE-284Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-760468.329.3GoogleChromeCWE-122Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.1…
CVE-2026-607428.129.3Oracle CorporationPeopleSoft Enterprise PeopleToolsCWE-284Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle Peop…
CVE-2026-608318.129.3Oracle CorporationPeopleSoft Enterprise PeopleToolsCWE-284Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle Peop…
CVE-2026-708469.629.2Oracle CorporationOracle Demand PlanningCWE-284Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (c…
CVE-2026-626008.129.2Oracle CorporationOracle Sales—Vulnerability in the Oracle Sales product of Oracle E-Business Suite (compone…
CVE-2026-706718.129.2Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-707088.129.2Oracle CorporationOracle Sales Foundation—Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Sui…
CVE-2026-707388.129.2Oracle CorporationOracle Hyperion Profitability and Cost Management—Vulnerability in the Oracle Hyperion Profitability and Cost Management produc…
CVE-2026-708058.129.2Oracle CorporationOracle Project Planning and ControlCWE-306Vulnerability in the Oracle Project Planning and Control product of Oracle E-…
CVE-2026-711615.329.2Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-706807.129.1Oracle CorporationOracle Applications DBACWE-284Vulnerability in the Oracle Applications DBA product of Oracle E-Business Sui…
CVE-2026-636426.329.1MagicMirrorOrgMagicMirrorCWE-918MagicMirror newsfeed Socket.IO notification allows blind server-side request …
CVE-2026-609719.828.9Oracle CorporationOracle WebCenter Enterprise CaptureCWE-284Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fu…
CVE-2026-739129.828.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-709589.628.9Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-601Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-711068.828.9Oracle CorporationOracle Hospitality OPERA 5 Property ServicesCWE-284Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of …
CVE-2026-710796.528.9Oracle CorporationMySQL ConnectorsCWE-284Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Con…
CVE-2026-710508.728.7Oracle CorporationOracle Product Lifecycle AnalyticsCWE-284Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Sup…
CVE-2026-610338.628.8Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-626258.628.8Oracle CorporationOracle Reports DeveloperCWE-284Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-710076.828.7Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-609059.628.6Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-7088010.028.4Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-624529.928.5Oracle CorporationSiebel CRM Cloud ApplicationsCWE-284Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-625399.828.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625419.828.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625439.828.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-708719.828.4Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-739969.828.4masteriyoMasteriyo - LMSCWE-434WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability
CVE-2026-689225.528.5MobSFMobile-Security-Framework-MobSFCWE-22MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads
CVE-2026-615748.828.3goauthentikauthentikCWE-639authentik RAC: access any endpoint via an unrelated application
CVE-2026-749048.728.3siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Missing Authorization via block API
CVE-2026-708496.528.4Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-610189.828.1Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-605928.228.2Oracle CorporationMySQL ClusterCWE-284Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluste…
CVE-2026-706877.728.2Oracle CorporationOracle Marketing—Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (com…
CVE-2026-707237.728.2Oracle CorporationOracle Hyperion Profitability and Cost Management—Vulnerability in the Oracle Hyperion Profitability and Cost Management produc…
CVE-2026-709427.728.2Oracle CorporationOracle Hyperion Financial ManagementCWE-200Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710706.528.2Oracle CorporationOracle Agile PLM MCAD ConnectorCWE-284Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-625859.828.1Oracle CorporationSiebel CRM AdministrationCWE-284Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (…
CVE-2026-739059.828.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739219.828.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-606808.128.1Oracle CorporationOracle WebLogic ServerCWE-284Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middlewa…
CVE-2026-609169.927.9Oracle CorporationOracle WebCenter Enterprise CaptureCWE-284Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fu…
CVE-2026-215847.628.0AtlassianBamboo Data Center—This High severity Improper Authorization vulnerability was introduced in ver…
CVE-2026-708559.327.8Oracle CorporationSiebel Apps - Self Service—Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM …
CVE-2026-624628.827.8Oracle CorporationOracle Work in Process—Vulnerability in the Oracle Work in Process product of Oracle E-Business Suit…
CVE-2026-708128.827.8Oracle CorporationOracle Call Center TechnologyCWE-284Vulnerability in the Oracle Call Center Technology product of Oracle E-Busine…
CVE-2026-607798.127.8Oracle CorporationSiebel Apps - MarketingCWE-284Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (co…
CVE-2026-707468.127.8Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-709318.127.8Oracle CorporationOracle WorkflowCWE-284Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (comp…
CVE-2026-709598.127.8Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-710428.127.8Oracle CorporationOracle Agile PLMCWE-284Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (compone…
CVE-2026-625937.727.8Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-733834.927.8WebAppickCTX FeedCWE-22WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
CVE-2026-625918.127.7Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-740387.027.7Wazuhwazuh-managerCWE-22Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment
CVE-2026-749889.827.6MozillaFirefoxCWE-119Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154
CVE-2026-624558.327.6Oracle CorporationSiebel CRM Cloud ApplicationsCWE-284Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-709258.127.6Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-760458.827.5GoogleChromeCWE-416Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a re…
CVE-2026-710578.527.5Oracle CorporationOracle BI PublisherCWE-284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (compone…
CVE-2026-710958.327.5Oracle CorporationOracle Business Intelligence Enterprise EditionCWE-284Vulnerability in the Oracle Business Intelligence Enterprise Edition product …
CVE-2026-709809.027.4Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-613078.127.4Oracle CorporationPeopleSoft Enterprise CC Common Application ObjectsCWE-284Vulnerability in the PeopleSoft Enterprise CC Common Application Objects prod…
CVE-2026-710358.127.4Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710538.127.4Oracle CorporationOracle Agile Engineering Data ManagementCWE-284Vulnerability in the Oracle Agile Engineering Data Management product of Orac…
CVE-2026-711128.127.4Oracle CorporationPeopleSoft Enterprise FIN Common ObjectsCWE-284Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Orac…
CVE-2026-607527.127.4Oracle CorporationSiebel Apps - MarketingCWE-284Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (co…
CVE-2026-612597.127.4Oracle CorporationOracle Hyperion Calculation ManagerCWE-284Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-707337.127.4Oracle CorporationOracle Hyperion Profitability and Cost ManagementCWE-284Vulnerability in the Oracle Hyperion Profitability and Cost Management produc…
CVE-2026-709337.127.4Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709347.127.4Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-713657.727.3Red HatRed Hat Ansible Automation Platform 2CWE-918Awx: webhook status callback ssrf leaks the git pat
CVE-2026-598257.427.3mastodonmastodonCWE-295Mastodon: Unwanted deactivation of SSL/TLS certificate verification
CVE-2026-738966.527.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-707188.527.1Oracle CorporationOracle Bills of Material—Vulnerability in the Oracle Bills of Material product of Oracle E-Business Su…
CVE-2026-707067.527.1Oracle CorporationOracle Sales—Vulnerability in the Oracle Sales product of Oracle E-Business Suite (compone…
CVE-2026-707637.527.1Oracle CorporationOracle Operations Intelligence—Vulnerability in the Oracle Operations Intelligence product of Oracle E-Busin…
CVE-2026-708657.527.1Oracle CorporationOracle Application Testing SuiteCWE-284Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-710697.527.1Oracle CorporationOracle Agile PLM MCAD ConnectorCWE-284Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-739955.427.1wpeverestUser RegistrationCWE-290WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerabi…
CVE-2026-608619.626.9Oracle CorporationService Delivery PlatformCWE-284Vulnerability in the Service Delivery Platform product of Oracle Fusion Middl…
CVE-2026-749869.126.9MozillaFirefoxCWE-200Site isolation issue in the CSS Parsing and Computation component
CVE-2026-534546.926.9ha-chinablueprint-studioCWE-522Blueprint Studio stored Git credentials in plaintext Git credential store
CVE-2026-750932.127.0sonostractCWE-120sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size
CVE-2026-708708.226.8Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-733378.226.8Joomla! ProjectJoomla! CMSCWE-287Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 a…
CVE-2026-625407.226.8Oracle CorporationOracle Cost Management—Vulnerability in the Oracle Cost Management product of Oracle E-Business Suit…
CVE-2026-707977.226.8Oracle CorporationOracle Purchasing—Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (co…
CVE-2026-708347.226.8Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-758428.326.6ArcadeDataarcadedbCWE-22ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV
CVE-2026-738797.526.6Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-624927.426.6Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625387.426.6Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707797.426.6Oracle CorporationOracle iSupplier PortalCWE-284Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Sui…
CVE-2026-707837.426.6Oracle CorporationOracle Service Contracts—Vulnerability in the Oracle Service Contracts product of Oracle E-Business Su…
CVE-2026-708237.426.6Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-659856.026.6frangoteamFUXACWE-918FUXA: SSRF hardening for `device-webapi-request`
CVE-2026-706739.326.3Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-758379.326.3getgravgravCWE-269Grav before 2.0.14 Privilege Escalation via Group Access Field
CVE-2026-610349.126.4Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-707028.226.3Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-707738.226.3Oracle CorporationOracle HCM Common ArchitectureCWE-284Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Busin…
CVE-2026-608207.426.4Oracle CorporationSiebel CRM IntegrationCWE-1284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-534585.326.3ha-chinablueprint-studioCWE-209Blueprint Studio API exposed internal exception details
CVE-2026-534538.726.3ha-chinablueprint-studioCWE-862Blueprint Studio API authorization bypass for non-admin Home Assistant users
CVE-2026-610388.226.2Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-610548.226.2Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-501438.126.2apifyapify-mcp-serverCWE-918Actor MCP path authority injection leaks Apify token
CVE-2026-707747.126.3Oracle CorporationOracle Warehouse ManagementCWE-284Vulnerability in the Oracle Warehouse Management product of Oracle E-Business…
CVE-2026-711108.126.2Oracle CorporationHelidonCWE-269Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749578.126.1MozillaFirefoxCWE-693Mitigation bypass in the Safe Browsing component
CVE-2026-715736.926.0Joomla! ProjectJoomla! CMSCWE-93Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5…
CVE-2026-666796.526.0codepeopleAppointment Hour BookingCWE-1284WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control v…
CVE-2026-710639.626.0Oracle CorporationOracle Database ServerCWE-284Vulnerability in the Portable Clusterware component of Oracle Database Server…
CVE-2026-710649.626.0Oracle CorporationOracle Database ServerCWE-284Vulnerability in the Portable Clusterware component of Oracle Database Server…
CVE-2026-527336.525.9ZcashFoundationzebraCWE-459ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after c…
CVE-2026-710379.325.8Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-608418.525.8Oracle CorporationOracle Unified DirectoryCWE-284Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middle…
CVE-2026-501388.125.8patrickhenergoshsCWE-284goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mo…
CVE-2026-709018.125.8Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-749486.525.8MozillaFirefoxCWE-200Information disclosure in the Graphics component
CVE-2026-760414.325.8GoogleChromeCWE-200Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a r…
CVE-2026-749078.225.7getgravgravCWE-22Grav before 2.0.15 Path Traversal via plugin-asset-map.php
CVE-2026-324817.525.7ezoicEzoicCWE-288WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability
CVE-2026-749899.825.5MozillaFirefoxCWE-119Internally found bugs fixed in Firefox 154
CVE-2026-608608.725.5Oracle CorporationService Delivery PlatformCWE-284Vulnerability in the Service Delivery Platform product of Oracle Fusion Middl…
CVE-2026-749777.525.5MozillaFirefoxCWE-190Integer overflow in the Graphics component
CVE-2026-749827.525.5MozillaFirefoxCWE-400Denial-of-service in the Widget component
CVE-2026-612729.825.4Oracle CorporationJD Edwards EnterpriseOne ToolsCWE-284Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwa…
CVE-2026-709539.825.4Oracle CorporationOracle Commerce PlatformCWE-306Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (com…
CVE-2026-709549.825.4Oracle CorporationOracle Commerce PlatformCWE-306Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (com…
CVE-2026-709959.825.4Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709949.125.4Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709979.125.4Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-492268.325.4givanzVvvebCWE-639Vvveb post authorization bypass allows Authors to view, duplicate, or delete …
CVE-2026-750822.125.5WebkulBagistoCWE-74Webkul Bagisto Customer-Registration Notification Email register cross site s…
CVE-2026-609909.925.3Oracle CorporationOracle Identity Manager ConnectorCWE-284Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-739398.625.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-759138.525.4HmbownCodeWhaleCWE-73CodeWhale before 0.8.64 Argument Injection via git_show
CVE-2026-739037.525.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-708567.525.2Oracle CorporationSiebel CRM DeploymentCWE-284Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (comp…
CVE-2026-155717.325.2Red HatRed Hat build of Keycloak 26.6CWE-341Keycloak-services: keycloak-services: predictable account-linking hash enable…
CVE-2026-739209.425.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-501918.825.1RARgames4gaBoardsCWE-2874gaBoards: Pre-Account Takeover via SSO Email Linkage
CVE-2026-707078.825.2Oracle CorporationOracle Sales for Handhelds—Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business …
CVE-2026-707878.825.2Oracle CorporationOracle Hyperion Financial ReportingCWE-284Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-707928.825.2Oracle CorporationOracle Yard ManagementCWE-284Vulnerability in the Oracle Yard Management product of Oracle E-Business Suit…
CVE-2026-708198.825.2Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-708748.825.2Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-749468.825.2MozillaFirefoxCWE-119Privilege escalation due to incorrect boundary conditions in the Graphics: Ca…
CVE-2026-749838.125.1MozillaFirefoxCWE-693Mitigation bypass in the Data Loss Prevention component
CVE-2026-757785.525.2code-projectsTask Management SystemCWE-74code-projects Task Management System Login Form index.php select_with_multipl…
CVE-2026-464825.325.1mybbmybbCWE-636MyBB: Security Question insufficient validation
CVE-2026-749859.825.0MozillaFirefoxCWE-269Privilege escalation in the Enterprise Policies component
CVE-2026-613218.124.9Oracle CorporationSiebel CRM Cloud ApplicationsCWE-284Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-709298.124.9Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709578.124.9Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-709998.124.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-609837.724.9Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-709887.724.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710567.724.9Oracle CorporationOracle Business Intelligence Enterprise EditionCWE-284Vulnerability in the Oracle Business Intelligence Enterprise Edition product …
CVE-2026-196717.124.9CISAgovMalcolmCWE-409Improper handling of highly compressed data (data amplification) in CISA Malcolm
CVE-2026-608306.524.9Oracle CorporationOracle WorkflowCWE-284Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (comp…
CVE-2026-709386.524.9Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709686.524.9Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-731896.524.9ThemeumWP CrowdfundingCWE-639WordPress WP Crowdfunding plugin < 2.2.1 - Insecure Direct Object References …
CVE-2026-734046.524.9StylemixMasterStudy LMSCWE-862WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability
CVE-2026-708629.124.7Oracle CorporationOracle Application Testing SuiteCWE-284Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-708729.124.7Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-708839.124.7Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-171067.124.8mobygo-archiveCWE-59Tar extraction in moby/go-archive can write outside the destination directory…
CVE-2026-623774.324.8strukturaglibheifCWE-617libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-bu…
CVE-2026-609558.224.6Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-738827.524.7Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749418.824.5MozillaFirefoxCWE-269Privilege escalation in the Graphics: CanvasWebGL component
CVE-2026-707788.724.6Oracle CorporationOracle Customer CareCWE-284Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite …
CVE-2026-708828.724.6Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-607657.524.5Oracle CorporationSiebel Apps - MarketingCWE-306Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (co…
CVE-2026-733777.524.5supsysticUltimate Maps by SupsysticCWE-862WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control v…
CVE-2026-739947.524.5Syed BalkhiCharitableCWE-862WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
CVE-2026-760423.124.6GoogleChromeCWE-908Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169…
CVE-2026-749389.124.5MozillaFirefoxCWE-693Mitigation bypass in the JavaScript: GC component
CVE-2026-758368.724.4getgravgravCWE-862Grav API Plugin before 1.0.14 Missing Authorization
CVE-2026-759128.324.4HmbownCodeWhaleCWE-88CodeWhale before 0.8.64 Argument Injection via git_blame
CVE-2026-611247.124.5Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-626318.824.3Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-708978.224.3Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-715724.824.3Joomla! ProjectJoomla! CMSCWE-93Joomla! Core - [20260801] - Response header injection in download views in Jo…
CVE-2026-749766.524.2MozillaFirefoxCWE-843JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-749698.824.1MozillaFirefoxCWE-416Use-after-free in the Layout: Text and Fonts component
CVE-2026-624858.224.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-725315.124.1Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice …
CVE-2026-725325.124.1Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260805] - Improper ACL checks for category webservice endpo…
CVE-2026-706727.424.0Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-708377.123.9Oracle CorporationOracle Financials for Asia/PacificCWE-284Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-B…
CVE-2026-709906.824.0Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-200Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-711216.524.0Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-733956.524.0wpdevartBooking calendar, Appointment Booking SystemCWE-639WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Ins…
CVE-2026-477216.324.0frangoteamFUXACWE-862FUXA: Scheduler API missing admin check enables operator-to-admin escalation …
CVE-2026-633377.523.8rabbitmqrabbitmq-java-clientCWE-470RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescript…
CVE-2026-608567.423.9Oracle CorporationPeopleSoft Enterprise PeopleToolsCWE-284Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle Peop…
CVE-2026-749056.923.9siyuan-notesiyuanCWE-918SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass
CVE-2026-706574.323.99001copypartyCWE-863Copyparty: file/dirkey confusion
CVE-2026-711244.323.9Oracle CorporationOracle Access ManagerCWE-284Vulnerability in the Oracle Access Manager product of Oracle Fusion Middlewar…
CVE-2026-758519.423.8ArcadeDataarcadedbCWE-269ArcadeDB before 26.8.1 Authentication Bypass via Async Command
CVE-2026-708078.523.8Oracle CorporationOracle Call Center TechnologyCWE-284Vulnerability in the Oracle Call Center Technology product of Oracle E-Busine…
CVE-2026-625527.523.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707777.523.8Oracle CorporationOracle iSupplier PortalCWE-284Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Sui…
CVE-2026-711047.223.8Oracle CorporationOracle HRMS (Netherlands)CWE-284Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business S…
CVE-2026-708167.123.8Oracle CorporationOracle Financials for EMEACWE-284Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business …
CVE-2026-708337.123.8Oracle CorporationOracle Landed Cost ManagementCWE-284Vulnerability in the Oracle Landed Cost Management product of Oracle E-Busine…
CVE-2026-708397.123.8Oracle CorporationOracle Financials for EMEA—Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business …
CVE-2026-740466.923.8Wazuhwazuh-managerCWE-409Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bomb
CVE-2026-625095.323.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625105.323.7Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625665.323.7Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625795.323.7Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707275.323.8Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-707545.323.7Oracle CorporationOracle Hyperion Financial ReportingCWE-284Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-709115.323.7Oracle CorporationOracle Hyperion Financial ManagementCWE-200Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-733365.123.8Joomla! ProjectJoomla! CMSCWE-79Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.…
CVE-2026-609818.723.6Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-612158.723.6Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-612198.723.6Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-758408.723.6ArcadeDataarcadedbCWE-1025ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex
CVE-2026-708037.623.5Oracle CorporationOracle General LedgerCWE-284Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-505777.423.6fbeta-GmbHePA3-Service-OpenSourceCWE-323ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter
CVE-2026-739229.123.5Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739249.123.5Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749498.823.3MozillaFirefoxCWE-416Use-after-free in the Graphics: Canvas2D component
CVE-2026-739027.523.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739157.523.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739347.523.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739357.523.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-710176.523.3Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-185045.423.4fastifyfastifyCWE-20fastify vulnerable to schema validation bypass via root primitive coercion mi…
CVE-2026-659595.323.4vitessiovitessCWE-862Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplicat…
CVE-2026-625908.523.3Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-708598.523.3Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-528778.323.2truelockmcstreambertCWE-20Streambert : Insecure Protocol Execution in open-external IPC Handler
CVE-2026-527938.123.2froxlorfroxlorCWE-287Froxlor: API Authentication bypasses 2FA Authentication
CVE-2026-606797.523.3Oracle CorporationOracle WebLogic ServerCWE-287Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middlewa…
CVE-2026-185347.423.2The Browser Company of New YorkArcSearchCWE-1021Address bar spoofing risk in affected iOS versions of Arc Search
CVE-2026-749358.823.1MozillaFirefoxCWE-269Privilege escalation in the DOM: Networking component
CVE-2026-707257.623.1Oracle CorporationOracle Advanced Inbound TelephonyCWE-284Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Bu…
CVE-2026-707647.623.1Oracle CorporationOracle General LedgerCWE-284Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-707247.523.1Oracle CorporationMySQL Cluster—Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluste…
CVE-2026-613086.823.1Oracle CorporationOracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise EditionCWE-284Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM E…
CVE-2026-610219.922.9Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-578269.822.9n/an/aCWE-295An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certif…
CVE-2026-610428.822.8Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-609959.922.7Oracle CorporationOracle Identity Manager ConnectorCWE-284Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-733738.922.8Joomla! ProjectJoomla! CMSCWE-434Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0…
CVE-2026-739298.322.8Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-607487.622.8Oracle CorporationOracle General LedgerCWE-284Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-612087.622.8Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-739087.522.8Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749799.822.6MozillaFirefoxCWE-284Mitigation bypass in the Add-ons Manager component
CVE-2026-711679.422.7Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-281918.822.7Theme-One Inc.The GridCWE-266WordPress The Grid plugin <= 2.7.9.1 - Privilege Escalation vulnerability
CVE-2026-710248.222.7Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-711005.322.6Oracle CorporationOracle Database ServerCWE-284Vulnerability in the RDBMS component of Oracle Database Server. Supported ver…
CVE-2026-711485.322.6Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-738955.322.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738995.322.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739065.322.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-674422.022.6frangoteamFUXACWE-284FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup
CVE-2026-749398.822.4MozillaFirefoxCWE-269Privilege escalation in the DOM: Navigation component
CVE-2026-749428.822.4MozillaFirefoxCWE-269Privilege escalation in the Remote Settings Client component
CVE-2026-457338.322.4TriliumNextTriliumCWE-79Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in …
CVE-2026-706947.722.5Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-706957.722.5Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-758439.422.4ArcadeDataarcadedbCWE-269ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction
CVE-2026-626109.122.3Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-706689.122.3Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-625358.622.3Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-626208.622.3Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-707288.522.3Oracle CorporationOracle Autonomous Health Framework—Vulnerability in Oracle Autonomous Health Framework (component: Trace File An…
CVE-2026-324687.522.3rayhanduitkuDuitku Payment GatewayCWE-497WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure …
CVE-2026-706967.522.3Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-626017.122.3Oracle CorporationOracle Sales—Vulnerability in the Oracle Sales product of Oracle E-Business Suite (compone…
CVE-2026-707367.122.3Oracle CorporationOracle Hyperion Profitability and Cost Management—Vulnerability in the Oracle Hyperion Profitability and Cost Management produc…
CVE-2026-708087.122.3Oracle CorporationOracle ScriptingCWE-284Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (com…
CVE-2026-708447.122.3Oracle CorporationOracle LoansCWE-284Vulnerability in the Oracle Loans product of Oracle E-Business Suite (compone…
CVE-2026-710604.422.4Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-451168.722.2mybbmybbCWE-79MyBB: Profile field type confusion XSS
CVE-2026-558398.722.2kestra-iokestraCWE-79Kestra: Stored XSS via custom Markdown [[link]] attribute injection
CVE-2026-609448.222.2Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-612228.222.2Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-707907.422.2Oracle CorporationOracle Telecommunications Billing IntegratorCWE-284Vulnerability in the Oracle Telecommunications Billing Integrator product of …
CVE-2026-612887.122.2Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-505766.822.2fbeta-GmbHePA3-Service-OpenSourceCWE-113ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests
CVE-2026-451255.322.2mybbmybbCWE-93MyBB: Email User CRLF injection
CVE-2026-622894.322.2strukturaglibheifCWE-191libheif: Integer underflow in Fraction constructor via double clap transform …
CVE-2026-609038.722.1Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609348.722.1Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609358.722.1Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609548.722.1Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609808.722.1Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-612128.522.1Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-607697.522.1Oracle CorporationOracle General LedgerCWE-306Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-709307.522.1Oracle CorporationOracle Order ManagementCWE-306Vulnerability in the Oracle Order Management product of Oracle E-Business Sui…
CVE-2026-709377.522.1Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709737.522.1Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-306Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-711607.522.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-607597.422.1Oracle CorporationOracle Internet Procurement ConnectorCWE-284Vulnerability in the Oracle Internet Procurement Connector product of Oracle …
CVE-2026-607667.422.1Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-607927.422.1Oracle CorporationSiebel CRM DeploymentCWE-284Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (comp…
CVE-2026-607977.422.2Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-608037.422.1Oracle CorporationSiebel Apps - MarketingCWE-284Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (co…
CVE-2026-609157.422.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-609337.422.1Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-710097.422.1Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-711437.422.1Oracle CorporationOracle Communications Unified Inventory ManagementCWE-284Vulnerability in the Oracle Communications Unified Inventory Management produ…
CVE-2026-709826.822.1Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709836.822.1Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709769.122.0Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709799.122.0Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-306Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-625968.522.0Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-613408.222.0Oracle CorporationOracle MES for Process ManufacturingCWE-284Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E…
CVE-2026-118017.522.0gwinWPAdverts – Classifieds PluginCWE-862WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Infor…
CVE-2026-738907.522.0Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-625877.122.0Oracle CorporationSiebel CRM AdministrationCWE-284Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (…
CVE-2026-758385.122.0cure53DOMPurifyCWE-79DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook
CVE-2026-612308.621.9Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-708907.521.9Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710765.321.9Oracle CorporationOracle Agile PLM MCAD ConnectorCWE-284Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-711575.321.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738775.321.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738885.321.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738895.321.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-616340.021.9rabbitmqrabbitmq-java-clientCWE-20RabbitMQ Java client accepts broker frames larger than the negotiated AMQP fr…
CVE-2021-437169.821.8n/an/aCWE-347Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Net…
CVE-2026-625829.621.8Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-749068.721.8siyuan-notesiyuanCWE-863SiYuan before v3.7.4 Incorrect Authorization via Publish Access
CVE-2026-707828.121.8Oracle CorporationOracle Labor Distribution—Vulnerability in the Oracle Labor Distribution product of Oracle E-Business S…
CVE-2026-708308.121.8Oracle CorporationOracle Process Manufacturing SystemsCWE-284Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E…
CVE-2026-492227.621.8givanzVvvebCWE-639Vvveb product question authorization bypass allows Vendors to read, approve, …
CVE-2026-492237.621.8givanzVvvebCWE-639Vvveb product review authorization bypass allows Vendors to read, approve, ed…
CVE-2026-492277.621.8givanzVvvebCWE-639Vvveb comment authorization bypass allows Authors to read, approve, edit, or …
CVE-2026-735296.921.8alextselegidisplainpadCWE-307Plainpad Missing Rate Limiting via POST /v1/sessions
CVE-2026-419215.121.8Koha CommunityKohaCWE-79Koha Stored XSS via Purchase Suggestion Handler
CVE-2026-239382.121.9ZabbixZabbixCWE-248Server DoS via JavaScript preprocessing or script items
CVE-2026-749538.821.7MozillaFirefoxCWE-269Privilege escalation in the Networking: Cookies component
CVE-2026-749658.821.7MozillaFirefoxCWE-269Privilege escalation in the Shell Integration component
CVE-2026-758988.421.7infiniflowragflowCWE-918RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component
CVE-2026-603927.821.7Oracle CorporationOracle Outside In TechnologyCWE-502Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Mi…
CVE-2026-604127.821.7Oracle CorporationOracle Outside In TechnologyCWE-502Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Mi…
CVE-2026-710487.621.7Oracle CorporationOracle Product Lifecycle AnalyticsCWE-284Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Sup…
CVE-2026-706795.321.7Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-239298.521.6ZabbixZabbixCWE-1321Prototype pollution leading to stored XSS
CVE-2026-740397.121.5Wazuhwazuh-managerCWE-770Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context
CVE-2026-691606.521.4OpenListTeamOpenListCWE-639OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API
CVE-2026-733986.521.5Papaki (Enartia S.A.)Piraeus Bank WooCommerce Payment GatewayCWE-288WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Auth…
CVE-2026-624605.021.4Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-624718.121.3Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707958.121.3Oracle CorporationOracle Applications Platform EngineeringCWE-284Vulnerability in the Oracle Applications Platform Engineering product of Orac…
CVE-2026-738947.321.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739187.321.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-710916.521.3Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-733715.121.3Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joo…
CVE-2026-733725.121.3Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260809] - Improper ACL checks when injection schema.org con…
CVE-2026-633356.321.3rabbitmqrabbitmq-java-clientCWE-20RabbitMQ Java client malformed body frame triggers raw command assembler exce…
CVE-2026-487965.321.2cefsharpCefSharpCWE-22CefSharp: `FolderSchemeHandlerFactory` path boundary check can expose files o…
CVE-2026-749378.821.1MozillaFirefoxCWE-416Use-after-free in the JavaScript: GC component
CVE-2026-451158.721.1mybbmybbCWE-79MyBB: Buddy/ignore list username XSS
CVE-2026-625988.221.2Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-707038.221.2Oracle CorporationOracle Agile Engineering Data Management—Vulnerability in the Oracle Agile Engineering Data Management product of Orac…
CVE-2026-241847.521.2NVIDIACumulus Linux GACWE-120NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Pro…
CVE-2026-527359.321.1ZcashFoundationzebraCWE-684ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-o…
CVE-2026-740159.321.1merkuloveReadablerCWE-89WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability
CVE-2026-612938.121.1Oracle CorporationOracle Hyperion Calculation ManagerCWE-284Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-607817.120.9Oracle CorporationOracle PaymentsCWE-306Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-476996.420.9confidential-containersguest-componentsCWE-22Confidential Containers Guest Components image-rs: zip-slip-class arbitrary f…
CVE-2026-758298.620.8getgravgravCWE-1336grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint
CVE-2026-691897.620.8hoppscotchhoppscotchCWE-200Hoppscotch: Cross-user private data exposure and UserHistory IDOR via team Gr…
CVE-2026-624817.520.9Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625556.520.9Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-739325.320.8Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-709038.720.8Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710008.720.8Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710149.120.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710369.120.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-738659.120.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-612288.620.6Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-709968.620.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-285677.520.6Fahad MahmoodWP Sort OrderCWE-862WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
CVE-2026-285717.520.6WPPOOLFormyChatCWE-862WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
CVE-2026-709477.520.6Oracle CorporationOracle PurchasingCWE-284Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (co…
CVE-2026-709857.520.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710387.520.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710437.520.6Oracle CorporationOracle Agile PLMCWE-284Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (compone…
CVE-2026-710617.520.6Oracle CorporationOracle Business Intelligence Enterprise EditionCWE-284Vulnerability in the Oracle Business Intelligence Enterprise Edition product …
CVE-2026-738877.520.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-710599.920.6Oracle CorporationOracle BI PublisherCWE-284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (compone…
CVE-2026-609678.820.5Oracle CorporationPeopleSoft Enterprise PeopleToolsCWE-284Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle Peop…
CVE-2026-612138.820.5Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-612738.820.5Oracle CorporationJD Edwards EnterpriseOne ToolsCWE-284Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwa…
CVE-2026-708998.820.5Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709518.820.5Oracle CorporationSiebel CRM End UserCWE-284Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (compon…
CVE-2026-709568.820.5Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-306Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-709658.820.5Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-710448.820.5Oracle CorporationOracle Agile PLMCWE-284Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (compone…
CVE-2026-710528.820.5Oracle CorporationOracle Agile Engineering Data ManagementCWE-284Vulnerability in the Oracle Agile Engineering Data Management product of Orac…
CVE-2026-710588.820.6Oracle CorporationOracle BI PublisherCWE-284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (compone…
CVE-2026-711508.820.5Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-625898.720.5Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-710188.220.4Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709745.320.3Oracle CorporationOracle Hyperion Financial ManagementCWE-200Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-749569.120.2MozillaFirefoxCWE-843Same-origin policy bypass in the DOM: Service Workers component
CVE-2026-707696.520.2Oracle CorporationOracle Hyperion Financial ReportingCWE-284Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-760334.220.2GoogleChromeCWE-20Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169…
CVE-2026-239222.120.2ZabbixZabbixCWE-522Email media OAuth secret leak to Super Admin
CVE-2026-706927.720.1Oracle CorporationOracle Marketing Encyclopedia System—Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E…
CVE-2026-708246.520.1Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-708256.520.1Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-740095.320.1RazorpayRazorpay for WooCommerceCWE-639WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object R…
CVE-2026-624428.120.0Oracle CorporationSiebel CRM Cloud Applications—Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-613067.120.1Oracle CorporationOracle Complex Maintenance, Repair and OverhaulCWE-284Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product …
CVE-2026-707516.820.1Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-707886.520.0Oracle CorporationOracle Hyperion Financial ReportingCWE-284Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-707165.920.0Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-711205.320.0Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-610458.619.9Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-324658.819.8g5themeEssential Real EstateCWE-502WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulner…
CVE-2026-198697.619.8neo4jgraphqlCWE-639Privilege Escalation via Dropped Field-Level @authentication
CVE-2026-758307.119.8getgravgravCWE-73grav-plugin-api before 1.0.15 Path Traversal via batchCopy
CVE-2026-239376.019.8ZabbixZabbixCWE-203Host PSK extraction in Zabbix API
CVE-2026-239315.319.8ZabbixZabbixCWE-203Frontend plaintext macro value enumeration via the validatate.api.exists action
CVE-2026-636412.319.8MagicMirrorOrgMagicMirrorCWE-284MagicMirror Socket.IO module namespaces bypass configured IP whitelist and al…
CVE-2026-324668.519.6WPExpertsGravity Forms Bookings premiumCWE-89WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulner…
CVE-2026-607588.519.6Oracle CorporationSiebel Artificial IntelligenceCWE-284Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel …
CVE-2026-607988.519.6Oracle CorporationSiebel CRM DeploymentCWE-284Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (comp…
CVE-2026-613268.519.6Oracle CorporationSiebel CRM Cloud ApplicationsCWE-284Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-710498.519.6Oracle CorporationOracle Product Lifecycle AnalyticsCWE-284Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Sup…
CVE-2026-609988.019.7Oracle CorporationOracle Identity Manager ConnectorCWE-284Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-539587.619.7RARgames4gaBoardsCWE-2874gaBoards: SSO Pre-Account Takeover / Hijacking via Mass Assignment
CVE-2026-709717.119.6Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-528736.919.8truelockmcstreambertCWE-79Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained X…
CVE-2026-487446.519.6saleorsaleorCWE-285Saleor: Anonymous users can modify channel settings via `channelUpdate` due t…
CVE-2026-709075.319.7Oracle CorporationOracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise EditionCWE-284Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM E…
CVE-2026-760325.319.6pydiocellsCWE-862Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Han…
CVE-2026-125649.619.4Red HatRed Hat Ansible Automation Platform 2CWE-918Automation-controller: automation-controller: kubernetes service account toke…
CVE-2026-612868.619.5Oracle CorporationOracle Enterprise Manager Base PlatformCWE-284Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracl…
CVE-2026-751306.419.4UptashContext7CWE-1427Context7 2.1.2 Prompt Injection via Custom AI Instructions
CVE-2026-609968.719.3Oracle CorporationOracle Identity Manager ConnectorCWE-284Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-285708.119.2SpabRiceVavo CoreCWE-98WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability
CVE-2026-324648.119.2Vladimir PrelovacTheme Test DriveCWE-98WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
CVE-2026-733457.119.2Saad IqbalLicense Manager for WooCommerceCWE-89WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vu…
CVE-2026-710086.819.3Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-708878.219.2Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-749667.519.1MozillaFirefoxCWE-359Information disclosure in the Form Autofill component
CVE-2026-494526.519.2KozeaWeasyPrintCWE-74WeasyPrint: CSS Injection via Presentational Hints
CVE-2026-626238.819.0Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-707158.819.0Oracle CorporationOracle Autonomous Health Framework—Vulnerability in Oracle Autonomous Health Framework (component: Trace File An…
CVE-2026-758415.319.0ArcadeDataarcadedbCWE-770ArcadeDB before 26.8.1 Denial of Service via range()
CVE-2026-758289.318.8getgravgravCWE-79Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass
CVE-2026-612298.119.0Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-625947.718.8Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-626158.518.6Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-708858.518.6Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-613317.718.7Oracle CorporationOracle Financials Common ModulesCWE-284Vulnerability in the Oracle Financials Common Modules product of Oracle E-Bus…
CVE-2026-708757.518.6Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-612907.118.7Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-608956.818.6Oracle CorporationOracle Unified DirectoryCWE-284Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middle…
CVE-2025-92116.718.7OtalioShip Property Management SystemCWE-79Cross-site scripting in Otalio Ship Property Management System
CVE-2026-707326.518.7Oracle CorporationOracle Mobile Application Server—Vulnerability in the Oracle Mobile Application Server product of Oracle E-Bus…
CVE-2026-709756.518.7Oracle CorporationOracle Hyperion Financial ManagementCWE-200Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-738857.218.6Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738867.218.6Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-606937.118.6Oracle CorporationOracle General LedgerCWE-284Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-708097.118.6Oracle CorporationOracle ScriptingCWE-284Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (com…
CVE-2026-738676.518.6Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-451234.318.6mybbmybbCWE-918MyBB: IPv6 SSRF
CVE-2026-472454.318.5mybbmybbCWE-252MyBB: Buddy list corruption
CVE-2026-608533.718.6Oracle CorporationHelidonCWE-200Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-707867.618.4Oracle CorporationOracle Service Fulfillment ManagerCWE-284Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-B…
CVE-2026-708647.618.4Oracle CorporationOracle Application Testing SuiteCWE-284Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-625236.518.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-739146.518.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-707536.318.4Oracle CorporationOracle Hyperion Financial ReportingCWE-284Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-758588.518.4HmbownCodeWhaleCWE-94CodeWhale rlm_eval before 0.8.64 Remote Code Execution
CVE-2026-706767.018.4Oracle CorporationOracle Hyperion Calculation ManagerCWE-284Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-324639.918.3Kamlesh ParmarSync Post With Other SiteCWE-434WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload v…
CVE-2026-710458.818.1Oracle CorporationOracle Agile PLMCWE-284Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (compone…
CVE-2026-612688.118.0Oracle CorporationJD Edwards EnterpriseOne ToolsCWE-284Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwa…
CVE-2026-612708.118.0Oracle CorporationJD Edwards EnterpriseOne OrchestratorCWE-284Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle …
CVE-2026-709048.118.1Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-613058.318.0Oracle CorporationOracle BI PublisherCWE-284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (compone…
CVE-2026-709357.117.9Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710037.117.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710127.117.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-605893.718.0Oracle CorporationOracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise EditionCWE-200Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM E…
CVE-2026-708047.717.8Oracle CorporationOracle Public Sector Human Resources—Vulnerability in the Oracle Public Sector Human Resources product of Oracle E…
CVE-2026-749587.517.8MozillaFirefoxCWE-1021Information disclosure in the WebRTC component
CVE-2026-626167.217.7Oracle CorporationOracle Reports DeveloperCWE-284Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-624587.117.8Oracle CorporationOracle Work in Process—Vulnerability in the Oracle Work in Process product of Oracle E-Business Suit…
CVE-2026-750895.517.7PHPGurukulComplaint Management SystemCWE-74PHPGurukul Complaint Management System check_availability.php sql injection
CVE-2026-706834.317.7Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-707917.617.6Oracle CorporationOracle Transportation ExecutionCWE-284Vulnerability in the Oracle Transportation Execution product of Oracle E-Busi…
CVE-2026-689273.017.6MobSFMobile-Security-Framework-MobSFCWE-918MobSF: SSRF port restriction bypass in assetlinks_check
CVE-2026-708938.217.4Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709648.217.4Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-709938.217.5Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-609697.717.5Oracle CorporationOracle Unified DirectoryCWE-200Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middle…
CVE-2026-609097.617.4Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-612277.617.4Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-739287.217.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-709726.817.4Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-606826.517.4Oracle CorporationOracle Hyperion Financial ReportingCWE-306Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-608666.517.4Oracle CorporationService Delivery PlatformCWE-284Vulnerability in the Service Delivery Platform product of Oracle Fusion Middl…
CVE-2026-738936.517.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738976.517.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-302506.117.4n/an/aCWE-79Cross-site scripting vulnerability in the user documentation field in Beta Sy…
CVE-2026-739095.917.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749714.317.4MozillaFirefoxCWE-200Information disclosure in the DOM: UI Events & Focus Handling component
CVE-2026-749724.317.4MozillaFirefoxCWE-200Information disclosure in the DOM: Push Subscriptions component
CVE-2026-756269.317.4smicallefspiderfootCWE-79SpiderFoot Stored Cross-Site Scripting via Correlation Titles
CVE-2026-711228.017.3Oracle CorporationOracle Business Intelligence Enterprise EditionCWE-284Vulnerability in the Oracle Business Intelligence Enterprise Edition product …
CVE-2026-708886.617.3Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710028.517.2Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-715748.517.2Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice e…
CVE-2026-666344.317.2PantheriusModal SurveyCWE-639WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object Reference…
CVE-2026-626189.317.1Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-708528.217.1Oracle CorporationOracle Demand PlanningCWE-284Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (c…
CVE-2026-625333.717.1Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-708483.717.1Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-706709.617.0Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-706997.417.0Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-711626.517.0Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-625323.817.0Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-749547.516.9MozillaFirefoxCWE-203Information disclosure due to side-channel in the Storage: Cache API component
CVE-2026-324737.216.7DeKnowsPDF Smart Viewer for ElementorCWE-918WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Reques…
CVE-2026-710327.216.7Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-738757.216.7Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738767.216.7Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-611986.516.7Oracle CorporationOracle Learning ManagementCWE-284Vulnerability in the Oracle Learning Management product of Oracle E-Business …
CVE-2026-738686.516.7Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-733568.216.5CloudwaysBreezeCWE-862WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability
CVE-2026-612818.116.6Oracle CorporationOracle Hyperion Calculation ManagerCWE-284Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-624996.116.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625263.316.5Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-708513.116.4Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-749619.116.3MozillaFirefoxCWE-203Side-channel in the Web Audio component
CVE-2026-672628.116.4DellPowerStore 500TCWE-862Dell PowerStore contains a Missing Authorization vulnerability. An attacker w…
CVE-2026-551065.316.3goauthentikauthentikCWE-862authentik: Unauthenticated LDAP directory data disclosure
CVE-2026-758315.116.4getgravgravCWE-79Grav before 2.0.15 Stored XSS via audio/video source URL
CVE-2026-624415.416.2Oracle CorporationOracle Hyperion Calculation ManagerCWE-284Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-624465.316.2Oracle CorporationOracle Hyperion Calculation ManagerCWE-284Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-710884.816.2Oracle CorporationOracle Agile PLM MCAD ConnectorCWE-284Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-451214.316.2mybbmybbCWE-863MyBB: Insufficient permission check for calendar select
CVE-2026-708677.116.1Oracle CorporationOracle Application Testing SuiteCWE-284Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-711036.316.1Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-196085.316.1Red HatRed Hat Build of KeycloakCWE-285Keycloak-services: keycloak-services: name-only group claims let same-name gr…
CVE-2026-758762.116.1xianrendzwEasyReportCWE-74xianrendzw EasyReport Move Operations ModuleController.java sql injection
CVE-2026-607337.716.0Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-758467.116.0ArcadeDataarcadedbCWE-862ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION
CVE-2026-685686.316.0StylemixMasterStudy LMSCWE-266WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability
CVE-2026-707756.316.0Oracle CorporationOracle Installed BaseCWE-284Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite…
CVE-2026-710628.515.8Oracle CorporationOracle Database ServerCWE-284Vulnerability in the RDBMS component of Oracle Database Server. Supported ver…
CVE-2026-611778.115.8Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-611997.715.8Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-709457.715.8Oracle CorporationOracle PayrollCWE-284Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (compo…
CVE-2026-325537.215.8Brainstorm ForceOttoKitCWE-918WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulne…
CVE-2026-733677.215.9supsysticEasy Google MapsCWE-829WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability
CVE-2026-126326.515.8zephyrprojectzephyrCWE-125Out-of-bounds read in Zephyr PTP message parsing from unvalidated message type
CVE-2026-709696.515.8Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710016.515.8Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-733526.515.8NexcessGiveWPCWE-862WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
CVE-2026-666227.515.8avertaDepicter SliderCWE-89WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability
CVE-2026-709607.615.6Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710277.615.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710237.515.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-545706.915.7AngleSharpAngleSharpCWE-80AngleSharp: HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration P…
CVE-2026-501395.915.6patrickhenergoshsCWE-362goshs: Share-link ?token=… redemption races past download limit
CVE-2026-451224.315.7mybbmybbCWE-863MyBB: Insufficient permission check for calendar event move
CVE-2026-451244.315.7mybbmybbCWE-862MyBB: Mod CP report resolution missing authorization
CVE-2026-734264.615.5basecamptrixCWE-79Trix: Stored XSS vulnerability through serialized attributes
CVE-2024-140452.115.4n/aOpenBoxesCWE-266OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper au…
CVE-2024-140462.115.4n/aOpenBoxesCWE-284OpenBoxes Document Upload Controller DocumentController.groovy DocumentContro…
CVE-2026-709989.315.3Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710659.315.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749478.815.4MozillaFirefoxCWE-763Privilege escalation due to invalid pointer in the Graphics component
CVE-2026-711308.215.4Oracle CorporationOracle VM VirtualBoxCWE-284Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (c…
CVE-2026-711598.215.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749788.115.3MozillaFirefoxCWE-1021Clickjacking issue in the Widget component
CVE-2026-611938.715.2Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-709008.715.2Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-708987.415.2Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710296.815.2Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-163095.315.2Netiket Information TechnologiesEdoWEBCWE-639IDOR in Netiket Information Technologies' EdoWEB
CVE-2026-740034.315.3romethemeRomethemeForm For ElementorCWE-862WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control…
CVE-2026-706817.515.1Oracle CorporationOracle Applications DBA—Vulnerability in the Oracle Applications DBA product of Oracle E-Business Sui…
CVE-2026-626277.115.1Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-707607.115.1Oracle CorporationOracle Order Management—Vulnerability in the Oracle Order Management product of Oracle E-Business Sui…
CVE-2026-153158.715.0TP-Link Systems Inc.Tapo C200 v5CWE-287Unauthenticated Administrative Authentication Bypass via device_confirm Repla…