CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-61119	7.1	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).	46d ago
CVE-2026-61095	7.1	—	—	—	oracle / communications unified inventory management	Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (componen	46d ago
CVE-2026-61049	7.1	—	—	—	oracle / production scheduling	Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operatio	46d ago
CVE-2026-61012	7.1	—	—	—	oracle / time and labor	Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60987	7.1	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	46d ago
CVE-2026-60985	7.1	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	46d ago
CVE-2026-60984	7.1	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	46d ago
CVE-2026-60908	7.1	—	—	—	oracle / installed base	Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).	46d ago
CVE-2026-60870	7.1	—	—	—	oracle / advanced pricing	Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).	46d ago
CVE-2026-60868	7.1	—	—	—	oracle / advanced pricing	Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).	46d ago
CVE-2026-60838	7.1	—	—	—	oracle / price protection	Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60834	7.1	—	—	—	oracle / solaris	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).	46d ago
CVE-2026-60800	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Wor	46d ago
CVE-2026-60799	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Wor	46d ago
CVE-2026-60774	7.1	—	—	—	oracle / applications framework	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Inc	46d ago
CVE-2026-60772	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Compon	46d ago
CVE-2026-60739	7.1	—	—	—	oracle / field service	Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60703	7.1	—	—	—	oracle / interaction blending	Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operation	46d ago
CVE-2026-60659	7.1	—	—	—	oracle / solaris	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).	46d ago
CVE-2026-60647	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Manageme	46d ago
CVE-2026-60623	7.1	—	—	—	oracle / mysql connector\/j	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).	46d ago
CVE-2026-60614	7.1	—	—	—	oracle / peoplesoft enterprise campus software campus community	Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Person Dat	46d ago
CVE-2026-60577	7.1	—	—	—	oracle / enterprise command center framework	Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor	46d ago
CVE-2026-60527	7.1	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).	46d ago
CVE-2026-60492	7.1	—	—	—	oracle / jd edwards enterpriseone hcm foundation	Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: OW HR PR Fou	46d ago
CVE-2026-60468	7.1	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60451	7.1	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60449	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	46d ago
CVE-2026-60305	7.1	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	46d ago
CVE-2026-60176	7.1	—	—	—	oracle / payments	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).	46d ago
CVE-2026-47015	7.1	—	—	—	oracle / peoplesoft enterprise peopletools	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technolog	46d ago
CVE-2026-46996	7.1	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Meta	46d ago
CVE-2026-56147	7.1	—	—	—	elastic / kibana	Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized information disclosu	46d ago
CVE-2026-47697	7.1	—	—	—	—	Shelf is a platform for tracking physical assets.	46d ago
CVE-2026-64880	7.1	—	—	—	tenable / security center	Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without p	46d ago
CVE-2026-3183	7.1	—	—	—	—	Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass.	47d ago
CVE-2026-55550	7.1	—	—	—	—	NextCRM is open-source customer relationship management (CRM) software.	47d ago
CVE-2026-56623	7.1	—	—	—	apache / mina sshd	Path traversal on Windows in Apache MINA SSHD component sshd-git.	47d ago
CVE-2026-47130	7.1	—	—	—	—	NextCRM is open-source customer relationship management (CRM) software.	47d ago
CVE-2026-63771	7.1	—	—	—	—	Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to manipulate cookie attribut	47d ago
CVE-2026-58484	7.1	—	—	—	network-ai / network-ai	Network-AI is a TypeScript/Node.js multi-agent orchestrator.	47d ago
CVE-2026-39879	7.1	—	—	—	—	Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e	47d ago
CVE-2026-9833	7.1	—	—	—	—	The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly e	48d ago
CVE-2026-12970	7.1	—	—	—	—	The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML	48d ago
CVE-2026-64186	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access	48d ago
CVE-2026-64172	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on H	48d ago
CVE-2026-64121	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_que	48d ago
CVE-2026-64111	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_at	48d ago
CVE-2026-64095	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla	48d ago
CVE-2026-63920	7.1	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before	48d ago
CVE-2026-63833	7.1	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct userspace writes to reser	48d ago
CVE-2026-63806	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioe	48d ago
CVE-2026-53402	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: fix out-of-bounds read in err_ou	48d ago
CVE-2026-53396	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in	48d ago
CVE-2026-53387	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml	48d ago
CVE-2026-53368	7.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorre	49d ago
CVE-2026-47870	7.1	—	—	—	broadcom / vmware avi load balancer	VMware Avi Load Balancer contains a privilege escalation vulnerability.	50d ago
CVE-2026-56171	7.1	—	—	—	microsoft / remote desktop web client	Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker t	50d ago
CVE-2026-52584	7.1	—	—	—	—	Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive informatio	50d ago
CVE-2026-45784	7.1	—	—	—	sfackler / openssl	rust-openssl provides OpenSSL bindings for the Rust programming language.	50d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker