Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,872 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-60460 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-60463 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-60532 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-60535 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen | |
CVE-2026-60538 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Sch | |
CVE-2026-60541 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Sch | |
CVE-2026-60551 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-60555 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-60566 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime | |
CVE-2026-60880 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60999 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Ser | |
CVE-2026-61065 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic | |
CVE-2026-61100 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon | |
CVE-2026-61129 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). | |
CVE-2026-61131 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Applicat | |
CVE-2026-61140 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente | |
CVE-2026-61145 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61154 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-61161 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-61167 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The su | |
CVE-2026-61178 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61183 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-61196 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg | |
CVE-2026-61233 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (c | |
CVE-2026-61245 |
critical | 9.8 | 0.0051 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (co | |
CVE-2026-2395 |
critical | 9.8 | 0.0047 | 2026-07-22 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i | |
CVE-2026-64796 |
critical | 9.8 | 0.0051 | 2026-07-22 | Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free di | |
CVE-2026-60367 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-60372 |
critical | 9.8 | 0.0055 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-64873 |
critical | 9.8 | 0.0048 | 2026-07-23 | Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could a | |
CVE-2026-64874 |
critical | 9.8 | 0.0052 | 2026-07-23 | Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN creden | |
CVE-2026-65431 |
critical | 9.8 | 0.0060 | 2026-07-23 | Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives ha | |
CVE-2026-59540 |
critical | 9.8 | 0.0048 | 2026-07-23 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions. | |
CVE-2026-59544 |
critical | 9.8 | 0.0056 | 2026-07-23 | Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions. | |
CVE-2026-61951 |
critical | 9.8 | 0.0048 | 2026-07-23 | Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions. | |
CVE-2026-64815 |
critical | 9.8 | 0.0048 | 2026-07-23 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form | |
CVE-2026-10697 |
critical | 9.8 | 0.0060 | 2026-07-23 | Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transf | |
CVE-2026-15966 |
critical | 9.8 | 0.0037 | 2026-07-23 | Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Tran | |
CVE-2026-15967 |
critical | 9.8 | 0.0037 | 2026-07-23 | Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEi | |
CVE-2026-52439 |
critical | 9.8 | 0.0068 | 2026-07-23 | An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.ne | |
CVE-2026-56165 |
critical | 9.8 | 0.0097 | 2026-07-23 | Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over | |
CVE-2026-15704 |
critical | 9.8 | 0.0046 | 2026-07-24 | In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are vuln | |
CVE-2026-16634 |
critical | 9.8 | 0.0082 | 2026-07-24 | TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The | |
CVE-2026-58586 |
critical | 9.8 | 0.0065 | 2026-07-24 | Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does | |
CVE-2026-16280 |
critical | 9.8 | 0.0053 | 2026-07-24 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncatio | |
CVE-2026-16766 |
critical | 9.8 | 0.0257 | 2026-07-25 | Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via P | |
CVE-2026-64439 |
critical | 9.8 | 0.0063 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async | |
CVE-2026-65879 |
critical | 9.8 | 0.0051 | 2026-07-27 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret | |
CVE-2026-63077 |
critical | 9.8 | 0.9356 | 2026-07-27 | KEV | JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unaut |
CVE-2026-28911 |
critical | 9.8 | 0.0050 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, m |