boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Tuesday, August 18, 2026 · all times UTC← 2026-08-17 · archive

Edition of August 18, 2026, continued — page 2 of 3. Back to page 1 · page 3

Results (continued, ranked) — ranks 401–1000 of 1407
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-527325.330.4ZcashFoundationzebraCWE-770ZEBRA: Mempool transaction admission denial via single-peer inbound queue sat…
CVE-2026-527345.330.4ZcashFoundationzebraCWE-401ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path ca…
CVE-2026-758569.230.3HmbownCodeWhaleCWE-918CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU
CVE-2026-608418.530.3Oracle CorporationOracle Unified Directory—Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middle…
CVE-2026-608498.530.3Oracle CorporationOracle Unified Directory—Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middle…
CVE-2026-607657.530.3Oracle CorporationSiebel Apps - Marketing—Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (co…
CVE-2026-609567.530.3Oracle CorporationJD Edwards EnterpriseOne US Payroll—Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD…
CVE-2026-707137.530.3Oracle CorporationOracle iSetup—Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (compon…
CVE-2026-708297.530.3Oracle CorporationOracle Process Manufacturing Systems—Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E…
CVE-2026-666207.230.2Derek HermanOptionTreeCWE-502WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability
CVE-2026-52607await30.3n/an/a—A directory traversal vulnerability in reportico-web <= 8.1.0 allows remote a…
CVE-2026-52610await30.3n/an/a—An arbitrary file write/directory traversal vulnerability in reportico-web <=…
CVE-2026-610189.829.8Oracle CorporationOracle WebCenter Sites—Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-708469.629.8Oracle CorporationOracle Demand Planning—Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (c…
CVE-2026-613218.129.8Oracle CorporationSiebel CRM Cloud Applications—Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-626008.129.8Oracle CorporationOracle Sales—Vulnerability in the Oracle Sales product of Oracle E-Business Suite (compone…
CVE-2026-706718.129.8Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-707088.129.8Oracle CorporationOracle Sales Foundation—Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Sui…
CVE-2026-707388.129.8Oracle CorporationOracle Hyperion Profitability and Cost Management—Vulnerability in the Oracle Hyperion Profitability and Cost Management produc…
CVE-2026-708058.129.8Oracle CorporationOracle Project Planning and Control—Vulnerability in the Oracle Project Planning and Control product of Oracle E-…
CVE-2026-709298.129.8Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709578.129.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-709998.129.8Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-711108.129.8Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-760414.329.7GoogleChromeCWE-200Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a r…
CVE-2026-636426.329.6MagicMirrorOrgMagicMirrorCWE-918MagicMirror newsfeed Socket.IO notification allows blind server-side request …
CVE-2026-158066.029.6Python Software FoundationCPythonCWE-319`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorr…
CVE-2026-760359.629.4GoogleChromeCWE-20Inappropriate implementation in Media in Google Chrome on on Mac prior to 151…
CVE-2026-610338.629.5Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-626258.629.5Oracle CorporationOracle Reports DeveloperCWE-284Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-626368.629.5Oracle CorporationOracle Reports DeveloperCWE-284Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-610669.929.2Oracle CorporationOracle Identity Manager—Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middlew…
CVE-2026-760468.329.2GoogleChromeCWE-122Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.1…
CVE-2026-708037.629.1Oracle CorporationOracle General LedgerCWE-284Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-7088010.029.0Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-609719.829.0Oracle CorporationOracle WebCenter Enterprise Capture—Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fu…
CVE-2026-612729.829.0Oracle CorporationJD Edwards EnterpriseOne Tools—Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwa…
CVE-2026-625399.829.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625419.829.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625439.829.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625859.829.0Oracle CorporationSiebel CRM Administration—Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (…
CVE-2026-708719.829.0Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709539.829.0Oracle CorporationOracle Commerce Platform—Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (com…
CVE-2026-709549.829.0Oracle CorporationOracle Commerce Platform—Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (com…
CVE-2026-709959.829.0Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-739059.829.0Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739129.829.0Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739219.829.0Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739969.829.0masteriyoMasteriyo - LMSCWE-434WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability
CVE-2026-709949.129.0Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709979.129.0Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-689225.529.1MobSFMobile-Security-Framework-MobSFCWE-22MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads
CVE-2026-609169.928.9Oracle CorporationOracle WebCenter Enterprise CaptureCWE-284Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fu…
CVE-2026-615748.828.9goauthentikauthentikCWE-639authentik RAC: access any endpoint via an unrelated application
CVE-2026-749048.728.9siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Missing Authorization via block API
CVE-2026-708496.529.0Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-738966.528.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-215809.328.8AtlassianConfluence Data Center—This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Securi…
CVE-2026-609837.728.8Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-706877.728.8Oracle CorporationOracle Marketing—Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (com…
CVE-2026-707237.728.8Oracle CorporationOracle Hyperion Profitability and Cost Management—Vulnerability in the Oracle Hyperion Profitability and Cost Management produc…
CVE-2026-709427.728.8Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709887.728.8Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710567.728.8Oracle CorporationOracle Business Intelligence Enterprise EditionCWE-284Vulnerability in the Oracle Business Intelligence Enterprise Edition product …
CVE-2026-608306.528.8Oracle CorporationOracle Workflow—Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (comp…
CVE-2026-709386.528.8Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709686.528.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-710706.528.8Oracle CorporationOracle Agile PLM MCAD Connector—Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-609818.728.5Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-612158.728.5Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-612198.728.5Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-215847.628.6AtlassianBamboo Data Center—This High severity Improper Authorization vulnerability was introduced in ver…
CVE-2026-760334.228.5GoogleChromeCWE-20Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169…
CVE-2026-609909.928.4Oracle CorporationOracle Identity Manager Connector—Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-609959.928.4Oracle CorporationOracle Identity Manager Connector—Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-612489.928.4Oracle CorporationOracle Internet Directory—Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middl…
CVE-2026-708559.328.4Oracle CorporationSiebel Apps - Self Service—Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM …
CVE-2026-710379.328.4Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-612318.828.4Oracle CorporationOracle Virtual Directory—Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middle…
CVE-2026-624628.828.4Oracle CorporationOracle Work in Process—Vulnerability in the Oracle Work in Process product of Oracle E-Business Suit…
CVE-2026-708128.828.4Oracle CorporationOracle Call Center Technology—Vulnerability in the Oracle Call Center Technology product of Oracle E-Busine…
CVE-2026-625918.128.4Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-707468.128.4Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-709018.128.4Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-733834.928.4WebAppickCTX FeedCWE-22WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
CVE-2026-608608.728.3Oracle CorporationService Delivery Platform—Vulnerability in the Service Delivery Platform product of Oracle Fusion Middl…
CVE-2026-740387.028.3Wazuhwazuh-managerCWE-22Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment
CVE-2026-749468.828.2MozillaFirefoxCWE-119Privilege escalation due to incorrect boundary conditions in the Graphics: Ca…
CVE-2026-749799.827.9MozillaFirefoxCWE-284Mitigation bypass in the Add-ons Manager component
CVE-2026-713657.727.9Red HatRed Hat Ansible Automation Platform 2CWE-918Awx: webhook status callback ssrf leaks the git pat
CVE-2026-598257.427.9mastodonmastodonCWE-295Mastodon: Unwanted deactivation of SSL/TLS certificate verification
CVE-2026-476287.527.8NVIDIATriton Inference ServerCWE-770NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-476297.527.8NVIDIATriton Inference ServerCWE-20NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-612128.527.7Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-625908.527.7Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-707188.527.7Oracle CorporationOracle Bills of Material—Vulnerability in the Oracle Bills of Material product of Oracle E-Business Su…
CVE-2026-708598.527.7Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-606797.527.7Oracle CorporationOracle WebLogic ServerCWE-287Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middlewa…
CVE-2026-607697.527.7Oracle CorporationOracle General Ledger—Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-707067.527.7Oracle CorporationOracle Sales—Vulnerability in the Oracle Sales product of Oracle E-Business Suite (compone…
CVE-2026-707637.527.7Oracle CorporationOracle Operations Intelligence—Vulnerability in the Oracle Operations Intelligence product of Oracle E-Busin…
CVE-2026-708657.527.7Oracle CorporationOracle Application Testing Suite—Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-709307.527.7Oracle CorporationOracle Order Management—Vulnerability in the Oracle Order Management product of Oracle E-Business Sui…
CVE-2026-709377.527.7Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709737.527.7Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-710697.527.7Oracle CorporationOracle Agile PLM MCAD Connector—Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-711607.527.7Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739955.427.7wpeverestUser RegistrationCWE-290WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerabi…
CVE-2026-749418.827.5MozillaFirefoxCWE-269Privilege escalation in the Graphics: CanvasWebGL component
CVE-2026-534546.927.5ha-chinablueprint-studioCWE-522Blueprint Studio stored Git credentials in plaintext Git credential store
CVE-2026-711244.327.5Oracle CorporationOracle Access ManagerCWE-284Vulnerability in the Oracle Access Manager product of Oracle Fusion Middlewar…
CVE-2026-750932.127.6sonostractCWE-120sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size
CVE-2026-324817.527.5ezoicEzoicCWE-288WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability
CVE-2026-610349.127.4Oracle CorporationOracle WebCenter Sites—Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-609558.227.3Oracle CorporationOracle WebCenter ContentCWE-284Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-733378.227.4Joomla! ProjectJoomla! CMSCWE-287Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 a…
CVE-2026-625407.227.4Oracle CorporationOracle Cost Management—Vulnerability in the Oracle Cost Management product of Oracle E-Business Suit…
CVE-2026-707977.227.4Oracle CorporationOracle Purchasing—Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (co…
CVE-2026-708347.227.4Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-711047.227.4Oracle CorporationOracle HRMS (Netherlands)—Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business S…
CVE-2026-739398.627.2Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-758428.327.3ArcadeDataarcadedbCWE-22ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV
CVE-2026-738797.527.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739037.527.2Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-624927.427.3Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625387.427.3Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707797.427.3Oracle CorporationOracle iSupplier Portal—Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Sui…
CVE-2026-707837.427.3Oracle CorporationOracle Service Contracts—Vulnerability in the Oracle Service Contracts product of Oracle E-Business Su…
CVE-2026-708237.427.3Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-659856.027.2frangoteamFUXACWE-918FUXA: SSRF hardening for `device-webapi-request`
CVE-2026-706739.326.9Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-758379.326.9getgravgravCWE-269Grav before 2.0.14 Privilege Escalation via Group Access Field
CVE-2026-610388.227.0Oracle CorporationOracle WebCenter Sites—Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-610548.227.0Oracle CorporationOracle WebCenter Sites—Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-707028.227.0Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-707738.226.9Oracle CorporationOracle HCM Common Architecture—Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Busin…
CVE-2026-708978.226.9Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-534585.327.0ha-chinablueprint-studioCWE-209Blueprint Studio API exposed internal exception details
CVE-2026-19501await27.0SureFormsSureForms—CVE-2026-19501
CVE-2026-534538.726.9ha-chinablueprint-studioCWE-862Blueprint Studio API authorization bypass for non-admin Home Assistant users
CVE-2026-708708.226.8Oracle CorporationOracle Hyperion Data Relationship ManagementCWE-284Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-501438.126.8apifyapify-mcp-serverCWE-918Actor MCP path authority injection leaks Apify token
CVE-2026-707257.626.8Oracle CorporationOracle Advanced Inbound TelephonyCWE-284Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Bu…
CVE-2026-707647.626.8Oracle CorporationOracle General LedgerCWE-284Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-708567.526.8Oracle CorporationSiebel CRM Deployment—Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (comp…
CVE-2026-749777.526.6MozillaFirefoxCWE-190Integer overflow in the Graphics component
CVE-2026-715736.926.6Joomla! ProjectJoomla! CMSCWE-93Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5…
CVE-2026-666796.526.6codepeopleAppointment Hour BookingCWE-1284WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control v…
CVE-2026-711216.526.6Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-610219.926.6Oracle CorporationOracle WebCenter Sites—Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-527336.526.5ZcashFoundationzebraCWE-459ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after c…
CVE-2026-501388.126.5patrickhenergoshsCWE-284goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mo…
CVE-2026-749498.826.3MozillaFirefoxCWE-416Privilege escalation due to use-after-free in the Graphics: Canvas2D component
CVE-2026-749078.226.4getgravgravCWE-22Grav before 2.0.15 Path Traversal via plugin-asset-map.php
CVE-2026-611247.126.3Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-760448.326.2GoogleChromeCWE-367Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remo…
CVE-2026-492268.326.1givanzVvvebCWE-639Vvveb post authorization bypass allows Authors to view, duplicate, or delete …
CVE-2026-750822.126.1WebkulBagistoCWE-74Webkul Bagisto Customer-Registration Notification Email register cross site s…
CVE-2026-759138.526.0HmbownCodeWhaleCWE-73CodeWhale before 0.8.64 Argument Injection via git_show
CVE-2026-710176.525.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710599.925.8Oracle CorporationOracle BI PublisherCWE-284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (compone…
CVE-2026-501918.825.7RARgames4gaBoardsCWE-2874gaBoards: Pre-Account Takeover via SSO Email Linkage
CVE-2026-610428.825.8Oracle CorporationOracle WebCenter Sites—Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-612138.825.8Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-612738.825.8Oracle CorporationJD Edwards EnterpriseOne Tools—Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwa…
CVE-2026-707078.825.8Oracle CorporationOracle Sales for Handhelds—Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business …
CVE-2026-707878.825.8Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-707928.825.8Oracle CorporationOracle Yard Management—Vulnerability in the Oracle Yard Management product of Oracle E-Business Suit…
CVE-2026-708198.825.8Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-708748.825.8Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-708998.825.8Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709518.825.8Oracle CorporationSiebel CRM End User—Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (compon…
CVE-2026-709568.825.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-709658.825.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-710448.825.8Oracle CorporationOracle Agile PLMCWE-284Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (compone…
CVE-2026-710528.825.8Oracle CorporationOracle Agile Engineering Data ManagementCWE-284Vulnerability in the Oracle Agile Engineering Data Management product of Orac…
CVE-2026-710588.825.8Oracle CorporationOracle BI PublisherCWE-284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (compone…
CVE-2026-711508.825.8Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-757785.525.8code-projectsTask Management SystemCWE-74code-projects Task Management System Login Form index.php select_with_multipl…
CVE-2026-464825.325.8mybbmybbCWE-636MyBB: Security Question insufficient validation
CVE-2026-760458.825.6GoogleChromeCWE-416Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a re…
CVE-2026-731896.525.6ThemeumWP CrowdfundingCWE-639WordPress WP Crowdfunding plugin < 2.2.1 - Insecure Direct Object References …
CVE-2026-734046.525.6StylemixMasterStudy LMSCWE-862WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability
CVE-2026-708629.125.4Oracle CorporationOracle Application Testing Suite—Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-708729.125.4Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-708839.125.4Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709769.125.3Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709799.125.3Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-749358.825.3MozillaFirefoxCWE-269Privilege escalation in the DOM: Networking component
CVE-2026-749398.825.3MozillaFirefoxCWE-269Privilege escalation in the DOM: Navigation component
CVE-2026-749428.825.3MozillaFirefoxCWE-269Privilege escalation in the Remote Settings Client component
CVE-2026-607487.625.4Oracle CorporationOracle General Ledger—Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-738827.525.3Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738907.525.3Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739027.525.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739157.525.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739347.525.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739357.525.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-711679.425.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739209.425.3Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-707788.725.2Oracle CorporationOracle Customer Care—Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite …
CVE-2026-708828.725.2Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709038.725.2Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710008.725.2Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710248.225.3Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-612087.625.3Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-710487.625.3Oracle CorporationOracle Product Lifecycle AnalyticsCWE-284Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Sup…
CVE-2026-733777.525.2supsysticUltimate Maps by SupsysticCWE-862WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control v…
CVE-2026-739947.525.2Syed BalkhiCharitableCWE-862WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
CVE-2026-758368.725.1getgravgravCWE-862Grav API Plugin before 1.0.14 Missing Authorization
CVE-2026-759128.325.0HmbownCodeWhaleCWE-88CodeWhale before 0.8.64 Argument Injection via git_blame
CVE-2026-626318.825.0Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-539596.525.0RARgames4gaBoardsCWE-2004gaBoards: Mass Information Disclosure (Internal PII Leakage) on /api/users t…
CVE-2026-715724.825.0Joomla! ProjectJoomla! CMSCWE-93Joomla! Core - [20260801] - Response header injection in download views in Jo…
CVE-2026-734264.624.9basecamptrixCWE-79Trix: Stored XSS vulnerability through serialized attributes
CVE-2026-609448.224.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-612228.224.7Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-624858.224.7Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-612887.124.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-725315.124.8Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice …
CVE-2026-725325.124.8Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260805] - Improper ACL checks for category webservice endpo…
CVE-2026-609038.724.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609348.724.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609358.724.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609548.724.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-609808.724.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-739298.324.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-607597.424.7Oracle CorporationOracle Internet Procurement Connector—Vulnerability in the Oracle Internet Procurement Connector product of Oracle …
CVE-2026-607667.424.7Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-607927.424.7Oracle CorporationSiebel CRM Deployment—Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (comp…
CVE-2026-607977.424.7Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-608037.424.7Oracle CorporationSiebel Apps - Marketing—Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (co…
CVE-2026-608207.424.7Oracle CorporationSiebel CRM IntegrationCWE-1284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-608567.424.7Oracle CorporationPeopleSoft Enterprise PeopleTools—Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle Peop…
CVE-2026-609157.424.7Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-609337.424.7Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-706727.424.7Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-710097.424.7Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-711437.424.7Oracle CorporationOracle Communications Unified Inventory ManagementCWE-284Vulnerability in the Oracle Communications Unified Inventory Management produ…
CVE-2026-708377.124.6Oracle CorporationOracle Financials for Asia/Pacific—Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-B…
CVE-2026-613086.824.7Oracle CorporationOracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition—Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM E…
CVE-2026-709826.824.7Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709836.824.7Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-709906.824.7Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-733956.524.7wpdevartBooking calendar, Appointment Booking SystemCWE-639WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Ins…
CVE-2026-477216.324.7frangoteamFUXACWE-862FUXA: Scheduler API missing admin check enables operator-to-admin escalation …
CVE-2026-633377.524.5rabbitmqrabbitmq-java-clientCWE-470RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescript…
CVE-2026-749056.924.5siyuan-notesiyuanCWE-918SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass
CVE-2026-706574.324.69001copypartyCWE-863Copyparty: file/dirkey confusion
CVE-2026-758519.424.4ArcadeDataarcadedbCWE-269ArcadeDB before 26.8.1 Authentication Bypass via Async Command
CVE-2026-749538.824.5MozillaFirefoxCWE-269Privilege escalation in the Networking: Cookies component
CVE-2026-612308.624.4Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-625968.524.4Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-708078.524.4Oracle CorporationOracle Call Center Technology—Vulnerability in the Oracle Call Center Technology product of Oracle E-Busine…
CVE-2026-625527.524.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707777.524.4Oracle CorporationOracle iSupplier Portal—Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Sui…
CVE-2026-708907.524.4Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-607817.124.4Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-625877.124.4Oracle CorporationSiebel CRM Administration—Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (…
CVE-2026-708167.124.4Oracle CorporationOracle Financials for EMEA—Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business …
CVE-2026-708337.124.4Oracle CorporationOracle Landed Cost Management—Vulnerability in the Oracle Landed Cost Management product of Oracle E-Busine…
CVE-2026-708397.124.4Oracle CorporationOracle Financials for EMEA—Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business …
CVE-2026-740466.924.4Wazuhwazuh-managerCWE-409Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bomb
CVE-2026-625095.324.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625105.324.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625665.324.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-625795.324.4Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707275.324.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-707545.324.4Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-709115.324.4Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710765.324.4Oracle CorporationOracle Agile PLM MCAD ConnectorCWE-284Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-711005.324.4Oracle CorporationOracle Database ServerCWE-284Vulnerability in the RDBMS component of Oracle Database Server. Supported ver…
CVE-2026-711485.324.4Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-711575.324.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738775.324.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738885.324.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738895.324.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738955.324.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738995.324.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739065.324.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-733365.124.4Joomla! ProjectJoomla! CMSCWE-79Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.…
CVE-2026-749389.124.3MozillaFirefoxCWE-693Mitigation bypass in the JavaScript: GC component
CVE-2026-281918.824.4Theme-One Inc.The GridCWE-266WordPress The Grid plugin <= 2.7.9.1 - Privilege Escalation vulnerability
CVE-2026-612938.124.3Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-758408.724.3ArcadeDataarcadedbCWE-1025ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex
CVE-2026-505777.424.2fbeta-GmbHePA3-Service-OpenSourceCWE-323ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter
CVE-2026-711205.324.2Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-185045.424.0fastifyfastifyCWE-20fastify vulnerable to schema validation bypass via root primitive coercion mi…
CVE-2026-659595.324.1vitessiovitessCWE-862Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplicat…
CVE-2026-185347.423.9The Browser Company of New YorkArcSearchCWE-1021Address bar spoofing risk in affected iOS versions of Arc Search
CVE-2026-707247.523.7Oracle CorporationMySQL Cluster—Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluste…
CVE-2026-612907.123.8Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-155717.323.6Red HatRed Hat build of Keycloak 26.6CWE-341Keycloak-services: keycloak-services: predictable account-linking hash enable…
CVE-2026-733738.923.4Joomla! ProjectJoomla! CMSCWE-434Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0…
CVE-2026-196717.123.4CISAgovMalcolmCWE-409Improper handling of highly compressed data (data amplification) in CISA Malcolm
CVE-2026-613067.123.4Oracle CorporationOracle Complex Maintenance, Repair and OverhaulCWE-284Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product …
CVE-2026-528778.323.2truelockmcstreambertCWE-20Streambert : Insecure Protocol Execution in open-external IPC Handler
CVE-2026-674422.023.2frangoteamFUXACWE-284FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup
CVE-2026-457338.323.1TriliumNextTriliumCWE-79Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in …
CVE-2026-706947.723.1Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-706957.723.1Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-738947.323.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739187.323.1Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-710604.423.1Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-758439.423.0ArcadeDataarcadedbCWE-269ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction
CVE-2026-626109.122.9Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-706689.122.9Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-710149.122.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710369.122.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-738659.122.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739229.122.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739249.122.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-612288.622.9Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-625358.623.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-626208.622.9Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-709968.622.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-607588.523.0Oracle CorporationSiebel Artificial Intelligence—Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel …
CVE-2026-607988.522.9Oracle CorporationSiebel CRM Deployment—Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (comp…
CVE-2026-613268.522.9Oracle CorporationSiebel CRM Cloud Applications—Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-707288.523.0Oracle CorporationOracle Autonomous Health Framework—Vulnerability in Oracle Autonomous Health Framework (component: Trace File An…
CVE-2026-710498.523.0Oracle CorporationOracle Product Lifecycle Analytics—Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Sup…
CVE-2026-324687.522.9rayhanduitkuDuitku Payment GatewayCWE-497WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure …
CVE-2026-706967.522.9Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-709477.522.9Oracle CorporationOracle Purchasing—Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (co…
CVE-2026-709857.522.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710387.522.9Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710437.522.9Oracle CorporationOracle Agile PLMCWE-284Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (compone…
CVE-2026-710617.522.9Oracle CorporationOracle Business Intelligence Enterprise EditionCWE-284Vulnerability in the Oracle Business Intelligence Enterprise Edition product …
CVE-2026-738877.522.9Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739087.522.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-626017.123.0Oracle CorporationOracle Sales—Vulnerability in the Oracle Sales product of Oracle E-Business Suite (compone…
CVE-2026-707367.122.9Oracle CorporationOracle Hyperion Profitability and Cost Management—Vulnerability in the Oracle Hyperion Profitability and Cost Management produc…
CVE-2026-708087.122.9Oracle CorporationOracle Scripting—Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (com…
CVE-2026-708447.122.9Oracle CorporationOracle Loans—Vulnerability in the Oracle Loans product of Oracle E-Business Suite (compone…
CVE-2026-709717.123.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-451168.722.8mybbmybbCWE-79MyBB: Profile field type confusion XSS
CVE-2026-558398.722.9kestra-iokestraCWE-79Kestra: Stored XSS via custom Markdown [[link]] attribute injection
CVE-2026-527938.122.9froxlorfroxlorCWE-287Froxlor: API Authentication bypasses 2FA Authentication
CVE-2026-707907.422.8Oracle CorporationOracle Telecommunications Billing Integrator—Vulnerability in the Oracle Telecommunications Billing Integrator product of …
CVE-2026-606937.122.9Oracle CorporationOracle General LedgerCWE-284Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite…
CVE-2026-708097.122.9Oracle CorporationOracle ScriptingCWE-284Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (com…
CVE-2026-505766.822.8fbeta-GmbHePA3-Service-OpenSourceCWE-113ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests
CVE-2026-451255.322.8mybbmybbCWE-93MyBB: Email User CRLF injection
CVE-2026-613408.222.6Oracle CorporationOracle MES for Process Manufacturing—Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E…
CVE-2026-710188.222.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-118017.522.6gwinWPAdverts – Classifieds PluginCWE-862WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Infor…
CVE-2026-758385.122.6cure53DOMPurifyCWE-79DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook
CVE-2026-616340.022.6rabbitmqrabbitmq-java-clientCWE-20RabbitMQ Java client accepts broker frames larger than the negotiated AMQP fr…
CVE-2026-625829.622.4Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-749068.722.4siyuan-notesiyuanCWE-863SiYuan before v3.7.4 Incorrect Authorization via Publish Access
CVE-2026-612688.122.4Oracle CorporationJD Edwards EnterpriseOne Tools—Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwa…
CVE-2026-612708.122.4Oracle CorporationJD Edwards EnterpriseOne Orchestrator—Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle …
CVE-2026-707828.122.4Oracle CorporationOracle Labor Distribution—Vulnerability in the Oracle Labor Distribution product of Oracle E-Business S…
CVE-2026-708308.122.4Oracle CorporationOracle Process Manufacturing Systems—Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E…
CVE-2026-492227.622.5givanzVvvebCWE-639Vvveb product question authorization bypass allows Vendors to read, approve, …
CVE-2026-492237.622.5givanzVvvebCWE-639Vvveb product review authorization bypass allows Vendors to read, approve, ed…
CVE-2026-492277.622.5givanzVvvebCWE-639Vvveb comment authorization bypass allows Authors to read, approve, edit, or …
CVE-2026-735296.922.4alextselegidisplainpadCWE-307Plainpad Missing Rate Limiting via POST /v1/sessions
CVE-2026-419215.122.5Koha CommunityKohaCWE-79Koha Stored XSS via Purchase Suggestion Handler
CVE-2026-239382.122.5ZabbixZabbixCWE-248Server DoS via JavaScript preprocessing or script items
CVE-2026-749658.822.3MozillaFirefoxCWE-269Privilege escalation in the Shell Integration component
CVE-2026-758988.422.4infiniflowragflowCWE-918RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component
CVE-2026-613058.322.3Oracle CorporationOracle BI PublisherCWE-284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (compone…
CVE-2026-706795.322.3Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-239298.522.2ZabbixZabbixCWE-1321Prototype pollution leading to stored XSS
CVE-2026-710028.522.2Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-740397.122.1Wazuhwazuh-managerCWE-770Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context
CVE-2026-691606.522.1OpenListTeamOpenListCWE-639OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API
CVE-2026-733986.522.2Papaki (Enartia S.A.)Piraeus Bank WooCommerce Payment GatewayCWE-288WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Auth…
CVE-2026-624605.022.1Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-612298.122.0Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-624718.122.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707958.122.0Oracle CorporationOracle Applications Platform Engineering—Vulnerability in the Oracle Applications Platform Engineering product of Orac…
CVE-2026-733715.122.0Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joo…
CVE-2026-733725.122.0Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260809] - Improper ACL checks when injection schema.org con…
CVE-2026-633356.321.9rabbitmqrabbitmq-java-clientCWE-20RabbitMQ Java client malformed body frame triggers raw command assembler exce…
CVE-2026-487965.321.9cefsharpCefSharpCWE-22CefSharp: `FolderSchemeHandlerFactory` path boundary check can expose files o…
CVE-2026-709075.321.9Oracle CorporationOracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise EditionCWE-284Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM E…
CVE-2026-739325.321.9Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-749378.821.8MozillaFirefoxCWE-416Use-after-free in the JavaScript: GC component
CVE-2026-451158.721.8mybbmybbCWE-79MyBB: Buddy/ignore list username XSS
CVE-2026-625988.221.8Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-707038.221.8Oracle CorporationOracle Agile Engineering Data Management—Vulnerability in the Oracle Agile Engineering Data Management product of Orac…
CVE-2026-708938.221.8Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709648.221.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-608956.821.8Oracle CorporationOracle Unified Directory—Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middle…
CVE-2026-709726.821.8Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-527359.321.7ZcashFoundationzebraCWE-684ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-o…
CVE-2026-740159.321.7merkuloveReadablerCWE-89WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability
CVE-2026-612868.621.7Oracle CorporationOracle Enterprise Manager Base PlatformCWE-284Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracl…
CVE-2026-476996.421.5confidential-containersguest-componentsCWE-22Confidential Containers Guest Components image-rs: zip-slip-class arbitrary f…
CVE-2026-609968.721.5Oracle CorporationOracle Identity Manager Connector—Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-758298.621.4getgravgravCWE-1336grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint
CVE-2026-691897.621.5hoppscotchhoppscotchCWE-200Hoppscotch: Cross-user private data exposure and UserHistory IDOR via team Gr…
CVE-2026-624817.521.5Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-709357.121.5Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710037.121.5Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710127.121.5Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710086.821.5Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-625556.521.5Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-710916.521.5Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-67920await21.5n/an/a—An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code vi…
CVE-2026-324658.821.3g5themeEssential Real EstateCWE-502WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulner…
CVE-2026-609678.821.4Oracle CorporationPeopleSoft Enterprise PeopleTools—Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle Peop…
CVE-2026-710458.821.4Oracle CorporationOracle Agile PLMCWE-284Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (compone…
CVE-2026-285677.521.2Fahad MahmoodWP Sort OrderCWE-862WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
CVE-2026-285717.521.2WPPOOLFormyChatCWE-862WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
CVE-2026-609097.621.0Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-612277.621.0Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-709745.321.0Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-607337.720.9Oracle CorporationOracle WebCenter PortalCWE-284Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-707696.520.9Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-749569.120.8MozillaFirefoxCWE-843Same-origin policy bypass in the DOM: Service Workers component
CVE-2026-709938.220.8Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-285708.120.8SpabRiceVavo CoreCWE-98WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability
CVE-2026-324648.120.8Vladimir PrelovacTheme Test DriveCWE-98WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
CVE-2026-706927.720.8Oracle CorporationOracle Marketing Encyclopedia System—Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E…
CVE-2026-706767.020.7Oracle CorporationOracle Hyperion Calculation ManagerCWE-284Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-708246.520.8Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-708256.520.8Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-740095.320.7RazorpayRazorpay for WooCommerceCWE-639WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object R…
CVE-2026-239222.120.8ZabbixZabbixCWE-522Email media OAuth secret leak to Super Admin
CVE-2026-624428.120.6Oracle CorporationSiebel CRM Cloud Applications—Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel C…
CVE-2026-625958.120.6Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-709048.120.6Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-609988.020.7Oracle CorporationOracle Identity Manager Connector—Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusi…
CVE-2026-711228.020.7Oracle CorporationOracle Business Intelligence Enterprise EditionCWE-284Vulnerability in the Oracle Business Intelligence Enterprise Edition product …
CVE-2026-625947.720.7Oracle CorporationSiebel CRM Integration—Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-707516.820.7Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-708886.620.7Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-707886.520.7Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-707165.920.6Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-198697.620.4neo4jgraphqlCWE-639Privilege Escalation via Dropped Field-Level @authentication
CVE-2026-758307.120.5getgravgravCWE-73grav-plugin-api before 1.0.15 Path Traversal via batchCopy
CVE-2026-636412.320.5MagicMirrorOrgMagicMirrorCWE-284MagicMirror Socket.IO module namespaces bypass configured IP whitelist and al…
CVE-2026-324668.520.3WPExpertsGravity Forms Bookings premiumCWE-89WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulner…
CVE-2026-611778.120.3Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-539587.620.3RARgames4gaBoardsCWE-2874gaBoards: SSO Pre-Account Takeover / Hijacking via Mass Assignment
CVE-2026-528736.920.4truelockmcstreambertCWE-79Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained X…
CVE-2026-487446.520.3saleorsaleorCWE-285Saleor: Anonymous users can modify channel settings via `channelUpdate` due t…
CVE-2026-239376.020.4ZabbixZabbixCWE-203Host PSK extraction in Zabbix API
CVE-2026-239315.320.4ZabbixZabbixCWE-203Frontend plaintext macro value enumeration via the validatate.api.exists action
CVE-2026-749714.320.3MozillaFirefoxCWE-200Information disclosure in the DOM: UI Events & Focus Handling component
CVE-2026-749724.320.3MozillaFirefoxCWE-200Information disclosure in the DOM: Push Subscriptions component
CVE-2026-760325.320.2pydiocellsCWE-862Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Han…
CVE-2026-751306.420.0UptashContext7CWE-1427Context7 2.1.2 Prompt Injection via Custom AI Instructions
CVE-2026-625898.720.0Oracle CorporationSiebel CRM IntegrationCWE-284Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (com…
CVE-2026-610458.620.0Oracle CorporationOracle WebCenter SitesCWE-284Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middlewa…
CVE-2026-733457.119.8Saad IqbalLicense Manager for WooCommerceCWE-89WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vu…
CVE-2026-708513.119.9Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-494526.519.8KozeaWeasyPrintCWE-74WeasyPrint: CSS Injection via Presentational Hints
CVE-2026-626238.819.7Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-707158.819.7Oracle CorporationOracle Autonomous Health Framework—Vulnerability in Oracle Autonomous Health Framework (component: Trace File An…
CVE-2026-241847.519.7NVIDIACumulus Linux GACWE-120NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Pro…
CVE-2026-707756.319.6Oracle CorporationOracle Installed BaseCWE-284Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite…
CVE-2026-711036.319.6Oracle CorporationOracle Hyperion Financial ManagementCWE-284Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-758415.319.6ArcadeDataarcadedbCWE-770ArcadeDB before 26.8.1 Denial of Service via range()
CVE-2026-758289.319.4getgravgravCWE-79Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass
CVE-2026-711626.519.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739146.519.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-626158.519.2Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-708858.519.2Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710628.519.2Oracle CorporationOracle Database ServerCWE-284Vulnerability in the RDBMS component of Oracle Database Server. Supported ver…
CVE-2026-609697.719.3Oracle CorporationOracle Unified Directory—Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middle…
CVE-2026-611997.719.3Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-613317.719.3Oracle CorporationOracle Financials Common Modules—Vulnerability in the Oracle Financials Common Modules product of Oracle E-Bus…
CVE-2026-709457.719.3Oracle CorporationOracle Payroll—Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (compo…
CVE-2026-708757.519.2Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-709467.519.2Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2025-92116.719.3OtalioShip Property Management SystemCWE-79Cross-site scripting in Otalio Ship Property Management System
CVE-2026-707326.519.3Oracle CorporationOracle Mobile Application Server—Vulnerability in the Oracle Mobile Application Server product of Oracle E-Bus…
CVE-2026-709696.519.3Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-709756.519.3Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710016.519.3Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-52608await19.3n/an/a—An incorrect access control vulnerability in reportico-web <= 8.1.0 allows an…
CVE-2026-708878.219.2Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710327.219.2Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-738757.219.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738767.219.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738857.219.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738867.219.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739287.219.2Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-708457.119.2Oracle CorporationOracle LoansCWE-284Vulnerability in the Oracle Loans product of Oracle E-Business Suite (compone…
CVE-2026-606826.519.2Oracle CorporationOracle Hyperion Financial ReportingCWE-306Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-608666.519.2Oracle CorporationService Delivery Platform—Vulnerability in the Service Delivery Platform product of Oracle Fusion Middl…
CVE-2026-611986.519.2Oracle CorporationOracle Learning Management—Vulnerability in the Oracle Learning Management product of Oracle E-Business …
CVE-2026-738676.519.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738686.519.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738936.519.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738976.519.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-451234.319.2mybbmybbCWE-918MyBB: IPv6 SSRF
CVE-2026-472454.319.1mybbmybbCWE-252MyBB: Buddy list corruption
CVE-2026-608533.719.2Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-612818.119.0Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-707867.619.0Oracle CorporationOracle Service Fulfillment Manager—Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-B…
CVE-2026-708647.619.0Oracle CorporationOracle Application Testing Suite—Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-709607.619.0Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-710277.619.0Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-625236.519.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707536.319.0Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…
CVE-2026-758588.519.0HmbownCodeWhaleCWE-94CodeWhale rlm_eval before 0.8.64 Remote Code Execution
CVE-2026-626167.218.9Oracle CorporationOracle Reports DeveloperCWE-284Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-625263.319.0Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-324639.918.9Kamlesh ParmarSync Post With Other SiteCWE-434WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload v…
CVE-2026-708047.718.4Oracle CorporationOracle Public Sector Human Resources—Vulnerability in the Oracle Public Sector Human Resources product of Oracle E…
CVE-2026-749587.518.4MozillaFirefoxCWE-1021Information disclosure in the WebRTC component
CVE-2026-624587.118.4Oracle CorporationOracle Work in Process—Vulnerability in the Oracle Work in Process product of Oracle E-Business Suit…
CVE-2026-750895.518.3PHPGurukulComplaint Management SystemCWE-74PHPGurukul Complaint Management System check_availability.php sql injection
CVE-2026-706834.318.3Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-707917.618.1Oracle CorporationOracle Transportation Execution—Vulnerability in the Oracle Transportation Execution product of Oracle E-Busi…
CVE-2026-689273.018.1MobSFMobile-Security-Framework-MobSFCWE-918MobSF: SSRF port restriction bypass in assetlinks_check
CVE-2026-733568.218.1CloudwaysBreezeCWE-862WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability
CVE-2026-302506.118.0n/an/aCWE-79Cross-site scripting vulnerability in the user documentation field in Beta Sy…
CVE-2026-756269.318.0smicallefspiderfootCWE-79SpiderFoot Stored Cross-Site Scripting via Correlation Titles
CVE-2026-125649.617.7Red HatRed Hat Ansible Automation Platform 2CWE-918Automation-controller: automation-controller: kubernetes service account toke…
CVE-2026-715748.517.8Joomla! ProjectJoomla! CMSCWE-284Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice e…
CVE-2026-710237.517.8Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience ManagerCWE-284Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-666344.317.8PantheriusModal SurveyCWE-639WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object Reference…
CVE-2026-626189.317.6Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-709989.317.6Oracle CorporationOracle Commerce Guided Search / Oracle Commerce Experience Manager—Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experien…
CVE-2026-710659.317.6Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-708528.217.6Oracle CorporationOracle Demand Planning—Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (c…
CVE-2026-711308.217.6Oracle CorporationOracle VM VirtualBox—Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (c…
CVE-2026-711598.217.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-708577.717.7Oracle CorporationSiebel CRM End UserCWE-284Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (compon…
CVE-2026-605893.717.7Oracle CorporationOracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition—Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM E…
CVE-2026-625333.717.7Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-708483.717.7Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-706709.617.6Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-710639.617.6Oracle CorporationOracle Database ServerCWE-284Vulnerability in the Portable Clusterware component of Oracle Database Server…
CVE-2026-710649.617.6Oracle CorporationOracle Database Server—Vulnerability in the Portable Clusterware component of Oracle Database Server…
CVE-2026-611938.717.5Oracle CorporationOracle WebCenter Portal—Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middlew…
CVE-2026-709008.717.5Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-706997.417.5Oracle CorporationOracle Payments—Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-708987.417.5Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-710296.817.5Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739095.917.5Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-625323.817.6Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-749547.517.4MozillaFirefoxCWE-203Information disclosure due to side-channel in the Storage: Cache API component
CVE-2026-324737.217.3DeKnowsPDF Smart Viewer for ElementorCWE-918WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Reques…
CVE-2026-325537.217.3Brainstorm ForceOttoKitCWE-918WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulne…
CVE-2026-733526.517.3NexcessGiveWPCWE-862WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
CVE-2026-708928.217.0Oracle CorporationOracle Hyperion Data Relationship Management—Vulnerability in the Oracle Hyperion Data Relationship Management product of …
CVE-2026-624996.117.0Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-551065.316.9goauthentikauthentikCWE-862authentik: Unauthenticated LDAP directory data disclosure
CVE-2026-758315.116.9getgravgravCWE-79Grav before 2.0.15 Stored XSS via audio/video source URL
CVE-2026-624415.416.8Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-624465.316.8Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-710884.816.8Oracle CorporationOracle Agile PLM MCAD Connector—Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-451214.316.8mybbmybbCWE-863MyBB: Insufficient permission check for calendar select
CVE-2026-708677.116.7Oracle CorporationOracle Application Testing Suite—Vulnerability in Oracle Application Testing Suite. The supported version that…
CVE-2026-196085.316.6Red HatRed Hat Build of KeycloakCWE-285Keycloak-services: keycloak-services: name-only group claims let same-name gr…
CVE-2026-758762.116.6xianrendzwEasyReportCWE-74xianrendzw EasyReport Move Operations ModuleController.java sql injection
CVE-2026-758467.116.6ArcadeDataarcadedbCWE-862ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION
CVE-2026-685686.316.6StylemixMasterStudy LMSCWE-266WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability
CVE-2026-733677.216.4supsysticEasy Google MapsCWE-829WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability
CVE-2026-126326.516.4zephyrprojectzephyrCWE-125Out-of-bounds read in Zephyr PTP message parsing from unvalidated message type
CVE-2026-749788.116.3MozillaFirefoxCWE-1021Clickjacking issue in the Widget component
CVE-2026-666227.516.3avertaDepicter SliderCWE-89WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability
CVE-2026-545706.916.2AngleSharpAngleSharpCWE-80AngleSharp: HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration P…
CVE-2026-501395.916.1patrickhenergoshsCWE-362goshs: Share-link ?token=… redemption races past download limit
CVE-2026-451224.316.2mybbmybbCWE-863MyBB: Insufficient permission check for calendar event move
CVE-2026-451244.316.2mybbmybbCWE-862MyBB: Mod CP report resolution missing authorization
CVE-2026-710906.416.1Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2024-140452.116.0n/aOpenBoxesCWE-266OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper au…
CVE-2024-140462.116.0n/aOpenBoxesCWE-284OpenBoxes Document Upload Controller DocumentController.groovy DocumentContro…
CVE-2026-749478.815.7MozillaFirefoxCWE-763Privilege escalation due to invalid pointer in the Graphics component
CVE-2026-163095.315.7Netiket Information TechnologiesEdoWEBCWE-639IDOR in Netiket Information Technologies' EdoWEB
CVE-2026-740034.315.8romethemeRomethemeForm For ElementorCWE-862WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control…
CVE-2021-43718await15.8n/an/a—An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075…
CVE-2026-706817.515.6Oracle CorporationOracle Applications DBA—Vulnerability in the Oracle Applications DBA product of Oracle E-Business Sui…
CVE-2026-625517.315.6Oracle CorporationOracle Hyperion Infrastructure TechnologyCWE-284Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-609497.115.6Oracle CorporationOracle WebCenter Content—Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middle…
CVE-2026-626277.115.6Oracle CorporationOracle Reports Developer—Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middle…
CVE-2026-707607.115.6Oracle CorporationOracle Order Management—Vulnerability in the Oracle Order Management product of Oracle E-Business Sui…
CVE-2026-153158.715.5TP-Link Systems Inc.Tapo C200 v5CWE-287Unauthenticated Administrative Authentication Bypass via device_confirm Repla…
CVE-2026-739318.315.6Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-11996.915.5ZabbixZabbixCWE-362API and Frontend login lockout race condition
CVE-2026-613425.315.6Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-67921await15.5n/an/a—Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions u…
CVE-2026-739258.215.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-708017.115.4Oracle CorporationOracle Flow Manufacturing—Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business S…
CVE-2026-706775.915.3Oracle CorporationOracle Hyperion Calculation Manager—Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hy…
CVE-2026-711655.415.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738815.415.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739135.415.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739195.415.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-710875.315.4Oracle CorporationOracle Agile PLM MCAD Connector—Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply…
CVE-2026-738715.315.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-738725.315.4Oracle CorporationHelidon—Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739005.315.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-739105.315.4Oracle CorporationHelidonCWE-284Vulnerability in the Helidon product of Oracle Fusion Middleware (component: …
CVE-2026-740075.315.4iberezansky3D FlipBook – PDF Flipbook Viewer, Flipbook Image GalleryCWE-497WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery plugin <=…
CVE-2026-740085.315.4avertaShortcodes and extra features for Phlox themeCWE-201WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - S…
CVE-2026-348849.815.1Apache Software FoundationApache SkyWalking MCPCWE-918Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expressio…
CVE-2026-607578.115.1Oracle CorporationSiebel CRM End UserCWE-284Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (compon…
CVE-2026-607918.115.1Oracle CorporationSiebel CRM Deployment—Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (comp…
CVE-2026-709438.115.1Oracle CorporationOracle Hyperion Financial Management—Vulnerability in the Oracle Hyperion Financial Management product of Oracle H…
CVE-2026-625686.115.1Oracle CorporationOracle Hyperion Infrastructure Technology—Vulnerability in the Oracle Hyperion Infrastructure Technology product of Ora…
CVE-2026-707656.115.1Oracle CorporationOracle Hyperion Financial Reporting—Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hy…