[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114058 | 21 Oct 2026 | CVSS 4.3 | ArcadeData arcadedbArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read… | |
| CVE-2026-114059 | 21 Oct 2026 | CVSS 7.5 | ArcadeData arcadedbArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to… | |
| CVE-2026-114046 | 21 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in… | |
| CVE-2026-114047 | 21 Oct 2026 | CVSS 6.8 | FreeRDPFreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS… | |
| CVE-2026-114048 | 21 Oct 2026 | CVSS 3.5 | WWBN AVideoWWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the… | |
| CVE-2026-114049 | 21 Oct 2026 | CVSS 3.7 | vllm-project vllmvLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by… | |
| CVE-2026-114050 | 21 Oct 2026 | CVSS 7.5 | vllm-project vllmvLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine… | |
| CVE-2026-114051 | 21 Oct 2026 | CVSS 7.5 | vllm-project vllmvLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, so the EngineCore input… | |
| CVE-2026-114052 | 21 Oct 2026 | CVSS 7.5 | vllm-project vllmvLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct… | |
| CVE-2026-114038 | 21 Oct 2026 | CVSS 5.1 | Red Hat Enterprise Linux 10A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a… | |
| CVE-2026-114041 | 21 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character… | |
| CVE-2026-114042 | 21 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when… | |
| CVE-2026-114043 | 21 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer()… | |
| CVE-2026-114044 | 21 Oct 2026 | CVSS 5.3 | FreeRDPFreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface… | |
| CVE-2026-114045 | 21 Oct 2026 | CVSS 8.8 | FreeRDPFreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in… | |
| CVE-2026-113736 | 21 Oct 2026 | CVSS 9.8 | D-Link DHP-W610AVA vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file… | |
| CVE-2026-113737 | 21 Oct 2026 | CVSS 5.5 | R6410418 Jackrong-llm-finetuning-guideA flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function… | |
| CVE-2026-113738 | 21 Oct 2026 | CVSS 6.3 | R6410418 Jackrong-llm-finetuning-guideA vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects… | |
| CVE-2026-113740 | 21 Oct 2026 | CVSS 6.3 | itsourcecode Online Cake Ordering SystemA flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file… | |
| CVE-2026-113741 | 21 Oct 2026 | CVSS 4.3 | itsourcecode Online Cake Ordering SystemA vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file… | |
| CVE-2026-111943 | 21 Oct 2026 | Not scored yet | Go standard library crypto/x509On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without… | Fix |
| CVE-2021-48019 | 21 Oct 2026 | CVSS 4.8 | vyperlang vyperVyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-byte RETURNDATASIZE rather… | |
| CVE-2021-48020 | 21 Oct 2026 | CVSS 6.5 | vyperlang vyperVyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are… | |
| CVE-2025-71437 | 21 Oct 2026 | CVSS 6.5 | astral-sh uvAstral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted… | |
| CVE-2026-105044 | 21 Oct 2026 | CVSS 8.5 | Qingteng Host Adaptive Security PlatformImproper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security… | |
| CVE-2020-37286 | 21 Oct 2026 | CVSS 6.5 | vyperlang vyperVyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls… | |
| CVE-2020-37287 | 21 Oct 2026 | CVSS 5.9 | vyperlang vyperVyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex types with non-base members are… | |
| CVE-2020-37288 | 21 Oct 2026 | CVSS 3.7 | vyperlang vyperVyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more… | |
| CVE-2020-37289 | 21 Oct 2026 | CVSS 3.7 | vyperlang vyperVyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to be stored in uint256… | |
| CVE-2021-48018 | 21 Oct 2026 | CVSS 7.4 | vyperlang vyperVyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When… | |
| CVE-2026-113707 | 21 Oct 2026 | CVSS 5.4 | a2aproject a2a-rsA security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file… | |
| CVE-2026-113735 | 21 Oct 2026 | CVSS 3.7 | D-Link DCS-6501LHA vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file… | |
| CVE-2026-113706 | 21 Oct 2026 | CVSS 3.5 | a2aproject a2a-rsA vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs… | |
| CVE-2026-109682 | 21 Oct 2026 | CVSS 4.7 | Rapid7 Metasploit FrameworkMetasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a different host without… | |
| CVE-2026-109681 | 21 Oct 2026 | CVSS 4.7 | Rapid7 Metasploit FrameworkThe FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any… | |
| CVE-2026-113705 | 20 Oct 2026 | CVSS 5.3 | a2aproject a2a-rsA vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs… | |
| CVE-2026-112202 | 20 Oct 2026 | Not scored yet | VulnerabilityImager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_consolidate => 1`, palette… | |
| CVE-2026-9825 | 20 Oct 2026 | CVSS 3.7 | IBM CyberFraudIBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections… | |
| CVE-2026-91668 | 20 Oct 2026 | CVSS 8.8 | Oracle Corporation Oracle Data IntegratorVulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are… | |
| CVE-2026-92559 | 20 Oct 2026 | CVSS 9.8 | IBM App Connect EnterpriseIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted… | |
| CVE-2026-93441 | 20 Oct 2026 | CVSS 8.6 | IBM QRadar Security Information and Event ManagementIBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | |
| CVE-2026-93442 | 20 Oct 2026 | CVSS 8.2 | IBM QRadarIBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of… | |
| CVE-2026-93744 | 20 Oct 2026 | CVSS 6.5 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending… | |
| CVE-2026-93888 | 20 Oct 2026 | CVSS 7.8 | IBM Sterling Connect Direct for UnixIBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to… | |
| CVE-2026-94402 | 20 Oct 2026 | CVSS 6.1 | IBM @carbon/chartsIBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a… | |
| CVE-2026-91657 | 20 Oct 2026 | CVSS 4.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91658 | 20 Oct 2026 | CVSS 9.9 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91659 | 20 Oct 2026 | CVSS 7.7 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low… | |
| CVE-2026-91660 | 20 Oct 2026 | CVSS 4.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91661 | 20 Oct 2026 | CVSS 7.7 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91662 | 20 Oct 2026 | CVSS 6.4 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit… | |
| CVE-2026-91663 | 20 Oct 2026 | CVSS 9.9 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91664 | 20 Oct 2026 | CVSS 7.5 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91665 | 20 Oct 2026 | CVSS 9.8 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91648 | 20 Oct 2026 | CVSS 5.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability… | |
| CVE-2026-91649 | 20 Oct 2026 | CVSS 6.0 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability… | |
| CVE-2026-91650 | 20 Oct 2026 | CVSS 3.7 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit… | |
| CVE-2026-91651 | 20 Oct 2026 | CVSS 8.5 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit… | |
| CVE-2026-91652 | 20 Oct 2026 | CVSS 5.0 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91653 | 20 Oct 2026 | CVSS 8.5 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable… | |
| CVE-2026-91654 | 20 Oct 2026 | CVSS 6.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91655 | 20 Oct 2026 | CVSS 9.1 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91656 | 20 Oct 2026 | CVSS 9.1 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable… | |
| CVE-2026-91640 | 20 Oct 2026 | CVSS 5.0 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91641 | 20 Oct 2026 | CVSS 5.0 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91642 | 20 Oct 2026 | CVSS 7.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91643 | 20 Oct 2026 | CVSS 5.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability… | |
| CVE-2026-91644 | 20 Oct 2026 | CVSS 9.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91645 | 20 Oct 2026 | CVSS 5.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91646 | 20 Oct 2026 | CVSS 5.6 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability… | |
| CVE-2026-91647 | 20 Oct 2026 | CVSS 8.1 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability… | |
| CVE-2026-91631 | 20 Oct 2026 | CVSS 5.0 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91632 | 20 Oct 2026 | CVSS 7.7 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91633 | 20 Oct 2026 | CVSS 6.0 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91634 | 20 Oct 2026 | CVSS 5.3 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91635 | 20 Oct 2026 | CVSS 8.1 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability… | |
| CVE-2026-91636 | 20 Oct 2026 | CVSS 7.7 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91637 | 20 Oct 2026 | CVSS 9.9 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91638 | 20 Oct 2026 | CVSS 9.9 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91639 | 20 Oct 2026 | CVSS 7.7 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91617 | 20 Oct 2026 | CVSS 5.5 | Oracle Corporation Oracle Middleware Common Libraries and ToolsVulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported… | |
| CVE-2026-91622 | 20 Oct 2026 | CVSS 9.3 | Oracle Corporation Oracle Agile Product Lifecycle Management for ProcessVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management)… | |
| CVE-2026-91623 | 20 Oct 2026 | CVSS 7.4 | Oracle Corporation Oracle Agile Product Lifecycle Management for ProcessVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management)… | |
| CVE-2026-91624 | 20 Oct 2026 | CVSS 9.1 | Oracle Corporation Oracle Agile Product Lifecycle Management for ProcessVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management)… | |
| CVE-2026-91625 | 20 Oct 2026 | CVSS 8.2 | Oracle Corporation Oracle Agile Product Lifecycle Management for ProcessVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management)… | |
| CVE-2026-91627 | 20 Oct 2026 | CVSS 7.8 | Oracle Corporation Oracle Communications Billing and Revenue ManagementVulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions… | |
| CVE-2026-91628 | 20 Oct 2026 | CVSS 5.5 | Oracle Corporation Oracle Communications Billing and Revenue ManagementVulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported… | |
| CVE-2026-91629 | 20 Oct 2026 | CVSS 4.7 | Oracle Corporation Oracle Communications Billing and Revenue ManagementVulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions… | |
| CVE-2026-91630 | 20 Oct 2026 | CVSS 6.8 | Oracle Corporation Oracle EssbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows… | |
| CVE-2026-91608 | 20 Oct 2026 | CVSS 7.5 | Oracle Corporation Oracle BI PublisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0… | |
| CVE-2026-91609 | 20 Oct 2026 | CVSS 6.5 | Oracle Corporation Oracle REST Data ServicesVulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable… | |
| CVE-2026-91610 | 20 Oct 2026 | CVSS 8.8 | Oracle Corporation Oracle REST Data ServicesVulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable… | |
| CVE-2026-91612 | 20 Oct 2026 | CVSS 3.3 | Oracle Corporation Oracle Communications Unified Inventory ManagementVulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions… | |
| CVE-2026-91613 | 20 Oct 2026 | CVSS 3.3 | Oracle Corporation Oracle Communications Unified Inventory ManagementVulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions… | |
| CVE-2026-91614 | 20 Oct 2026 | CVSS 3.3 | Oracle Corporation Oracle Communications Unified Inventory ManagementVulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions… | |
| CVE-2026-91615 | 20 Oct 2026 | CVSS 6.3 | Oracle Corporation Oracle Database ServerVulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3… | |
| CVE-2026-91616 | 20 Oct 2026 | CVSS 3.7 | Oracle Corporation Oracle Middleware Common Libraries and ToolsVulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported… | |
| CVE-2026-91579 | 20 Oct 2026 | CVSS 8.8 | Oracle Corporation Oracle BI PublisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are… | |
| CVE-2026-91582 | 20 Oct 2026 | CVSS 3.7 | Oracle Corporation Oracle Business Intelligence Enterprise EditionVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that… | |
| CVE-2026-91588 | 20 Oct 2026 | CVSS 6.5 | Oracle Corporation Oracle Business Intelligence Enterprise EditionVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are… |
Page 11 of 168