CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-60651	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Manageme	46d ago
CVE-2026-60639	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60638	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60637	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60636	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60635	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60634	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60633	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60618	8.8	—	—	—	oracle / jd edwards enterpriseone procurement and subcontract management	Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards	46d ago
CVE-2026-60603	8.8	—	—	—	oracle / peoplesoft enterprise campus software campus community	Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Australian	46d ago
CVE-2026-60602	8.8	—	—	—	oracle / peoplesoft enterprise cs student financials	Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing)	46d ago
CVE-2026-60594	8.8	—	—	—	oracle / peoplesoft enterprise campus software campus community	Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integratio	46d ago
CVE-2026-60583	8.8	—	—	—	oracle / transportation management	Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install).	46d ago
CVE-2026-60580	8.8	—	—	—	oracle / enterprise command center framework	Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor	46d ago
CVE-2026-60563	8.8	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).	46d ago
CVE-2026-60549	8.8	—	—	—	oracle / managed file transfer	Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Serv	46d ago
CVE-2026-60545	8.8	—	—	—	oracle / managed file transfer	Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Serv	46d ago
CVE-2026-60539	8.8	—	—	—	oracle / soa suite	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight	46d ago
CVE-2026-60503	8.8	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60499	8.8	—	—	—	oracle / jd edwards enterpriseone solution advisor	Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution A	46d ago
CVE-2026-60493	8.8	—	—	—	oracle / jd edwards enterpriseone human resources management	Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component:	46d ago
CVE-2026-60490	8.8	—	—	—	oracle / jd edwards enterpriseone crm foundation	Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundati	46d ago
CVE-2026-60489	8.8	—	—	—	oracle / jd edwards enterpriseone crm foundation	Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundati	46d ago
CVE-2026-60472	8.8	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60465	8.8	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60464	8.8	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60430	8.8	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	46d ago
CVE-2026-60423	8.8	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	46d ago
CVE-2026-60419	8.8	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	46d ago
CVE-2026-60400	8.8	—	—	—	oracle / goldengate	Vulnerability in Oracle GoldenGate (component: Admin Server Executable).	46d ago
CVE-2026-60398	8.8	—	—	—	oracle / goldengate	Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices).	46d ago
CVE-2026-60343	8.8	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60334	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60313	8.8	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60309	8.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60268	8.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60261	8.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60218	8.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60211	8.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60207	8.8	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60203	8.8	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60175	8.8	—	—	—	oracle / database server	Vulnerability in the RDBMS component of Oracle Database Server.	46d ago
CVE-2026-60157	8.8	—	—	—	oracle / goldengate	Vulnerability in Oracle GoldenGate (component: Service Manager).	46d ago
CVE-2026-47037	8.8	—	—	—	oracle / access manager	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).	46d ago
CVE-2026-47031	8.8	—	—	—	oracle / bills of material	Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues).	46d ago
CVE-2026-47004	8.8	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self	46d ago
CVE-2026-46998	8.8	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Meta	46d ago
CVE-2026-46995	8.8	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Meta	46d ago
CVE-2026-46992	8.8	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Ente	46d ago
CVE-2026-64881	8.8	—	—	—	tenable / security center	The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system comma	46d ago
CVE-2026-55084	8.8	—	—	—	—	DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization.	46d ago
CVE-2026-44880	8.8	—	—	—	hpe / arubaos-cx	A buffer overflow vulnerability was found in the command line interface of AOS-CX.	46d ago
CVE-2026-47405	8.8	—	—	—	—	PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.	46d ago
CVE-2026-47399	8.8	—	—	—	—	PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.	46d ago
CVE-2026-59851	8.8	—	—	—	libssh / libssh	A flaw was found in libssh.	46d ago
CVE-2026-16401	8.8	—	—	—	mozilla / firefox	Privilege escalation in the Data Loss Prevention component.	46d ago
CVE-2026-16396	8.8	—	—	—	mozilla / firefox	Privilege escalation in WebExtensions.	46d ago
CVE-2026-16379	8.8	—	—	—	mozilla / firefox	Privilege escalation in the DOM: Content Processes component.	46d ago
CVE-2026-16372	8.8	—	—	—	mozilla / firefox	Privilege escalation in the DOM: Content Processes component.	46d ago
CVE-2026-16371	8.8	—	—	—	mozilla / firefox	Privilege escalation in the DOM: Navigation component.	46d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker