CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-71012	7.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	18d ago
CVE-2026-71003	7.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	18d ago
CVE-2026-70971	7.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-70967	7.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-70936	7.1	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70935	7.1	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70934	7.1	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70933	7.1	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70902	7.1	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	18d ago
CVE-2026-70867	7.1	—	—	—	oracle / application testing suite	Vulnerability in Oracle Application Testing Suite.	18d ago
CVE-2026-70858	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	18d ago
CVE-2026-70845	7.1	—	—	—	oracle / loans	Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70844	7.1	—	—	—	oracle / loans	Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70839	7.1	—	—	—	oracle / financials for emea	Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations	18d ago
CVE-2026-70837	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Op	18d ago
CVE-2026-70833	7.1	—	—	—	oracle / landed cost management	Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operati	18d ago
CVE-2026-70816	7.1	—	—	—	oracle / financials for emea	Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations	18d ago
CVE-2026-70809	7.1	—	—	—	oracle / scripting	Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70808	7.1	—	—	—	oracle / scripting	Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70806	7.1	—	—	—	oracle / e-business tax	Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70801	7.1	—	—	—	oracle / flow manufacturing	Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations)	18d ago
CVE-2026-70774	7.1	—	—	—	oracle / warehouse management	Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operation	18d ago
CVE-2026-70760	7.1	—	—	—	oracle / order management	Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Too	18d ago
CVE-2026-70736	7.1	—	—	—	oracle / hyperion profitability and cost management	Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Depl	18d ago
CVE-2026-70733	7.1	—	—	—	oracle / hyperion profitability and cost management	Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Depl	18d ago
CVE-2026-70705	7.1	—	—	—	oracle / hyperion calculation manager	Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70680	7.1	—	—	—	oracle / applications dba	Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-62627	7.1	—	—	—	oracle / reports developer	Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authent	18d ago
CVE-2026-62601	7.1	—	—	—	oracle / sales	Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-62587	7.1	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival).	18d ago
CVE-2026-62537	7.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-62536	7.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-62522	7.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Secur	18d ago
CVE-2026-62458	7.1	—	—	—	oracle / work in process	Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-61306	7.1	—	—	—	oracle / complex maintenance repair and overhaul	Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component	18d ago
CVE-2026-61295	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	18d ago
CVE-2026-61290	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	18d ago
CVE-2026-61288	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	18d ago
CVE-2026-61259	7.1	—	—	—	oracle / hyperion calculation manager	Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-61124	7.1	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).	18d ago
CVE-2026-60949	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	18d ago
CVE-2026-60781	7.1	—	—	—	oracle / payments	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).	18d ago
CVE-2026-60752	7.1	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	18d ago
CVE-2026-60693	7.1	—	—	—	oracle / general ledger	Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-24185	7.1	—	—	—	—	NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component	18d ago
CVE-2026-74038	7.1	—	—	—	—	Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to	18d ago
CVE-2026-73396	7.1	—	—	—	—	Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.	18d ago
CVE-2026-73393	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.	18d ago
CVE-2026-73382	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.	18d ago
CVE-2026-73378	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.	18d ago
CVE-2026-73375	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.	18d ago
CVE-2026-73362	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.	18d ago
CVE-2026-73361	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.	18d ago
CVE-2026-73360	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.	18d ago
CVE-2026-73358	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.	18d ago
CVE-2026-73351	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.	18d ago
CVE-2026-73345	7.1	—	—	—	—	Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.	18d ago
CVE-2026-73342	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.	18d ago
CVE-2026-73338	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.	18d ago
CVE-2026-73190	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.	18d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker