Browse All CVEs
3,599 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62624 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62626 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62629 |
critical | 9.4 | 0.0041 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62630 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62632 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62633 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62634 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62635 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62638 |
critical | 9.1 | 0.0045 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62639 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-62640 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-70668 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-70669 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-70673 |
critical | 9.3 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-70689 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Infrastructure). The supported version that | |
CVE-2026-70739 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (compo | |
CVE-2026-70740 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (compo | |
CVE-2026-70741 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (compo | |
CVE-2026-70745 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (compo | |
CVE-2026-70817 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-16498 |
critical | 10.0 | 0.0046 | 2026-10-29 | The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential r | |
CVE-2026-50736 |
critical | 9.0 | 0.0041 | 2026-10-29 | The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL | |
CVE-2026-50737 |
critical | 9.0 | 0.0040 | 2026-10-29 | When applying replicated changes for a row that is missing one or more columns, pglogical | |
CVE-2026-16184 |
critical | 9.8 | 0.0047 | 2026-10-29 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass auth | |
CVE-2026-14446 |
critical | 9.8 | 0.0053 | 2026-10-29 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privi | |
CVE-2026-14512 |
critical | 9.8 | 0.0097 | 2026-10-29 | IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authenticat | |
CVE-2026-14973 |
critical | 9.3 | 0.0045 | 2026-10-29 | IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be w | |
CVE-2026-14974 |
critical | 9.8 | 0.0068 | 2026-10-29 | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to | |
CVE-2026-14976 |
critical | 9.8 | 0.0061 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote | |
CVE-2026-62325 |
critical | 9.1 | 0.0043 | 2026-10-29 | goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1 | |
CVE-2026-64863 |
critical | 9.1 | 0.0042 | 2026-10-29 | goshs is a feature-rich single-binary file server for red teamers and developers. Prior to | |
CVE-2026-63229 |
critical | 9.1 | 0.0052 | 2026-10-29 | A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthent | |
CVE-2026-63230 |
critical | 9.1 | 0.0052 | 2026-10-29 | A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an una | |
CVE-2026-63232 |
critical | 9.9 | 0.0053 | 2026-10-29 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authent | |
CVE-2026-63233 |
critical | 9.9 | 0.0053 | 2026-10-29 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authent | |
CVE-2026-63234 |
critical | 9.9 | 0.0053 | 2026-10-29 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authent | |
CVE-2026-18191 |
critical | 9.3 | 0.0069 | 2026-10-29 | VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unaut | |
CVE-2026-59243 |
critical | 9.8 | 0.0064 | 2026-10-29 | The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decodi | |
CVE-2026-14488 |
critical | 9.1 | 0.0052 | 2026-10-29 | The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the templ | |
CVE-2026-65883 |
critical | 10.0 | 0.0081 | 2026-10-29 | Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less | |
CVE-2026-65884 |
critical | 10.0 | 0.0052 | 2026-10-29 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registrati | |
CVE-2026-65885 |
critical | 9.4 | 0.0052 | 2026-10-29 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - | |
CVE-2026-65889 |
critical | 9.2 | 0.0044 | 2026-10-29 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - T | |
CVE-2026-65890 |
critical | 9.2 | 0.0050 | 2026-10-29 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multi | |
CVE-2026-9177 |
critical | 9.4 | 0.0050 | 2026-10-29 | A Server-Side Template Injection (SSTI) vulnerability was identified in the mail template | |
CVE-2026-65886 |
critical | 9.2 | 0.0055 | 2026-10-29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - | |
CVE-2026-65887 |
critical | 10.0 | 0.0052 | 2026-10-29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.2 | |
CVE-2026-65888 |
critical | 10.0 | 0.0052 | 2026-10-29 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The | |
CVE-2026-54735 |
critical | 10.0 | 0.0061 | 2026-10-29 | Prebid Server is an open-source solution for running real-time advertising auctions in the | |
CVE-2026-60112 |
critical | 9.3 | 0.0079 | 2026-10-29 | AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerab |