CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-61115	7.2	—	—	—	oracle / order management	Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Too	46d ago
CVE-2026-61107	7.2	—	—	—	oracle / applications dba	Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-61094	7.2	—	—	—	oracle / mysql server	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).	46d ago
CVE-2026-61068	7.2	—	—	—	oracle / peoplesoft enterprise fin billing argentina	Vulnerability in the PeopleSoft Enterprise FIN Billing Argentina product of Oracle PeopleSoft (component: Billing)	46d ago
CVE-2026-61039	7.2	—	—	—	oracle / advanced supply chain planning	Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle E-Business Suite (component: Core).	46d ago
CVE-2026-61035	7.2	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite (component: Internal Op	46d ago
CVE-2026-61027	7.2	—	—	—	oracle / cost management	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Inventory Costing).	46d ago
CVE-2026-61025	7.2	—	—	—	oracle / irecruitment	Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-61006	7.2	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Interna	46d ago
CVE-2026-60926	7.2	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operatio	46d ago
CVE-2026-60925	7.2	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operatio	46d ago
CVE-2026-60918	7.2	—	—	—	oracle / shipping execution	Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations)	46d ago
CVE-2026-60910	7.2	—	—	—	oracle / property manager	Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60900	7.2	—	—	—	oracle / human capital management configuration workbench	Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Rapid Imple	46d ago
CVE-2026-60845	7.2	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA General B	46d ago
CVE-2026-60836	7.2	—	—	—	oracle / hcm common architecture	Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operat	46d ago
CVE-2026-60828	7.2	—	—	—	oracle / interaction blending	Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operation	46d ago
CVE-2026-60813	7.2	—	—	—	oracle / istore	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).	46d ago
CVE-2026-60787	7.2	—	—	—	oracle / receivables	Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60786	7.2	—	—	—	oracle / receivables	Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60755	7.2	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60734	7.2	—	—	—	oracle / trading community	Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI).	46d ago
CVE-2026-60645	7.2	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Manageme	46d ago
CVE-2026-60576	7.2	—	—	—	oracle / enterprise command center framework	Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor	46d ago
CVE-2026-60546	7.2	—	—	—	oracle / soa suite	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight	46d ago
CVE-2026-60529	7.2	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).	46d ago
CVE-2026-60519	7.2	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	46d ago
CVE-2026-60502	7.2	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60466	7.2	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60418	7.2	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	46d ago
CVE-2026-60396	7.2	—	—	—	oracle / goldengate	Vulnerability in Oracle GoldenGate (component: Distribution Server executable).	46d ago
CVE-2026-60345	7.2	—	—	—	oracle / jdeveloper	Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components).	46d ago
CVE-2026-60340	7.2	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterprise Command Cent	46d ago
CVE-2026-60335	7.2	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60316	7.2	—	—	—	oracle / mysql server	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).	46d ago
CVE-2026-60245	7.2	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60153	7.2	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).	46d ago
CVE-2026-47006	7.2	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self	46d ago
CVE-2026-47005	7.2	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self	46d ago
CVE-2026-46988	7.2	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Conn	46d ago
CVE-2026-46981	7.2	—	—	—	oracle / utilities network management system	Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (componen	46d ago
CVE-2026-46954	7.2	—	—	—	oracle / human resources	Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool).	46d ago
CVE-2026-44879	7.2	—	—	—	—	A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remot	46d ago
CVE-2026-44878	7.2	—	—	—	—	A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authentic	46d ago
CVE-2026-63454	7.2	—	—	—	hpe / arubaos-cx	An authenticated path traversal vulnerability exists in AOS-CX.	46d ago
CVE-2026-63453	7.2	—	—	—	hpe / arubaos-cx	Buffer overflow vulnerabilities exist in the command line interface of AOS-CX.	46d ago
CVE-2026-1771	7.2	—	—	—	—	The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the	47d ago
CVE-2026-6952	7.2	—	—	—	—	A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7	47d ago
CVE-2026-14448	7.2	—	—	—	—	An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_c	48d ago
CVE-2026-51082	7.2	—	—	—	—	A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-mana	51d ago
CVE-2026-15395	7.2	—	—	—	—	The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scri	51d ago
CVE-2026-44982	7.2	—	—	—	—	CrowdSec offers crowdsourced protection against malicious IPs.	51d ago
CVE-2026-7543	7.2	—	—	—	—	The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields' parameter in vers	52d ago
CVE-2026-13042	7.2	—	—	—	—	The RPB Chessboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all ve	52d ago
CVE-2026-62350	7.2	—	—	—	—	TDengine is an open source, time-series database optimized for Internet of Things devices.	52d ago
CVE-2026-20297	7.2	—	—	—	splunk / splunk	In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions	52d ago
CVE-2026-47992	7.2	—	—	—	adobe / commerce	Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injectio	53d ago
CVE-2026-15410zero day	7.2	11.8%	3/3	same day	sonicwall / sma6210 firmware	Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in	53d ago
CVE-2026-54433	7.2	—	—	—	roundcube / webmail	In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafte	53d ago
CVE-2026-62643	7.2	—	—	—	roundcube / webmail	In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization	54d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker