CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-75953	7.5	—	—	—	—	Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken fr	71d ago
CVE-2026-49289	7.5	—	—	—	—	The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality.	71d ago
CVE-2026-45742	7.5	—	—	—	—	Gotenberg is a Docker-powered stateless API for PDF files.	71d ago
CVE-2026-45741	7.5	—	—	—	—	Gotenberg is a Docker-powered stateless API for PDF files.	71d ago
CVE-2026-16818	7.5	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un	71d ago
CVE-2026-16817	7.5	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a	71d ago
CVE-2026-16706	7.5	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an	71d ago
CVE-2026-16690	7.5	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un	71d ago
CVE-2026-14970	7.5	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buf	71d ago
CVE-2026-76234	7.5	—	—	—	—	libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation	71d ago
CVE-2026-76218	7.5	—	—	—	gitpython project / gitpython	GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git optio	71d ago
CVE-2026-76216	7.5	—	—	—	—	Vikunja through 2.4.0 contains a principal-type confusion vulnerability where LinkSharing principals with id N are	71d ago
CVE-2026-51367	7.5	—	—	—	—	An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via	71d ago
CVE-2020-37267	7.5	—	—	—	—	Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token i	71d ago
CVE-2019-25766	7.5	—	—	—	—	Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during cer	71d ago
CVE-2026-76235	7.5	—	—	—	—	A memory leak flaw was found in cockpit-ws.	71d ago
CVE-2026-73394	7.5	—	—	—	—	Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.	71d ago
CVE-2026-73386	7.5	—	—	—	—	Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.	71d ago
CVE-2026-73385	7.5	—	—	—	—	Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.	71d ago
CVE-2026-73384	7.5	—	—	—	—	Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.	71d ago
CVE-2026-75589	7.5	—	—	—	—	Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant	71d ago
CVE-2026-58085	7.5	—	—	—	freebsd / freebsd	After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether th	71d ago
CVE-2026-14861	7.5	—	—	—	—	The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a ve	71d ago
CVE-2026-50142	7.5	—	—	—	—	libheif is a HEIF and AVIF file format decoder and encoder.	71d ago
CVE-2026-73938	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73936	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73935	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73934	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73927	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73915	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73908	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73907	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73903	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73902	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73890	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73887	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73884	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73883	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73882	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73879	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-73878	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-71160	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-71158	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-71153	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-71142	7.5	—	—	—	oracle / communications unified inventory management	Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (componen	71d ago
CVE-2026-71117	7.5	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-71116	7.5	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	71d ago
CVE-2026-71113	7.5	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	71d ago
CVE-2026-71107	7.5	—	—	—	oracle / business intelligence	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analy	71d ago
CVE-2026-71092	7.5	—	—	—	—	Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft (component: Lease	71d ago
CVE-2026-71069	7.5	—	—	—	oracle / agile plm mcad connector	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).	71d ago
CVE-2026-71061	7.5	—	—	—	oracle / business intelligence	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Pl	71d ago
CVE-2026-71043	7.5	—	—	—	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).	71d ago
CVE-2026-71038	7.5	—	—	—	—	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-71034	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-71023	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-70987	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-70986	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-70985	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-70973	7.5	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	71d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker