CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 5 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-55973	7.5	—	—	—	nlnetlabs / unbound	In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-C	81d ago
CVE-2026-44690	7.5	—	—	—	nlnetlabs / unbound	In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined	81d ago
CVE-2026-40691	7.5	—	—	—	nlnetlabs / unbound	In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts	81d ago
CVE-2026-32665	7.5	—	—	—	nlnetlabs / unbound	In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first	81d ago
CVE-2026-13189	7.5	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the s	81d ago
CVE-2026-13184	7.5	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and mac	81d ago
CVE-2026-13183	7.5	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptog	81d ago
CVE-2026-13182	7.5	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish dec	81d ago
CVE-2026-65598	7.5	—	—	—	n8n / n8n	n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that al	82d ago
CVE-2026-57600	7.5	—	—	—	—	Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attac	82d ago
CVE-2026-63047	7.5	—	—	—	—	Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.	82d ago
CVE-2026-45820	7.5	—	—	—	101arrowz / fflate	fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync().	82d ago
CVE-2026-12987	7.5	—	—	—	—	The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using N	82d ago
CVE-2026-56819	7.5	—	—	—	netty / netty	Netty is a network application framework for development of protocol servers and clients.	82d ago
CVE-2026-16422	7.5	—	—	—	google / chrome	Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowe	82d ago
CVE-2026-65319	7.5	—	—	—	—	Feedbin (commit 739884a) contains an unauthenticated information disclosure vulnerability that allows unauthentica	82d ago
CVE-2026-65315	7.5	—	—	—	—	Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that al	82d ago
CVE-2026-62521	7.5	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General).	82d ago
CVE-2026-62495	7.5	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component:	82d ago
CVE-2026-62493	7.5	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).	82d ago
CVE-2026-61337	7.5	—	—	—	oracle / lease and finance management	Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal O	82d ago
CVE-2026-61309	7.5	—	—	—	oracle / in-memory cost management for discrete industries	Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (	82d ago
CVE-2026-61236	7.5	—	—	—	oracle / peoplesoft enterprise fin common objects	Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Staf	82d ago
CVE-2026-61232	7.5	—	—	—	oracle / peoplesoft enterprise fin common objects	Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Comm	82d ago
CVE-2026-61226	7.5	—	—	—	oracle / communications converged application server	Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (componen	82d ago
CVE-2026-61202	7.5	—	—	—	oracle / solaris	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).	82d ago
CVE-2026-61188	7.5	—	—	—	oracle / agile product lifecycle management for process	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (compone	82d ago
CVE-2026-61172	7.5	—	—	—	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).	82d ago
CVE-2026-61159	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	82d ago
CVE-2026-61158	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	82d ago
CVE-2026-61157	7.5	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	82d ago
CVE-2026-61141	7.5	—	—	—	oracle / advanced benefits	Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act).	82d ago
CVE-2026-61138	7.5	—	—	—	oracle / complex maintenance repair and overhaul	Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component	82d ago
CVE-2026-61133	7.5	—	—	—	oracle / commerce platform	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)	82d ago
CVE-2026-61116	7.5	—	—	—	oracle / application object library	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).	82d ago
CVE-2026-61114	7.5	—	—	—	oracle / application object library	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privilege	82d ago
CVE-2026-61088	7.5	—	—	—	oracle / peoplesoft enterprise scm manufacturing	Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security).	82d ago
CVE-2026-61087	7.5	—	—	—	oracle / peoplesoft enterprise fin payables	Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Security).	82d ago
CVE-2026-61086	7.5	—	—	—	oracle / peoplesoft enterprise scm order management	Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security)	82d ago
CVE-2026-61085	7.5	—	—	—	oracle / peoplesoft enterprise scm inventory	Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security).	82d ago
CVE-2026-61077	7.5	—	—	—	oracle / peoplesoft enterprise scm mobile inventory management	Vulnerability in the PeopleSoft Enterprise SCM Mobile Inventory Management product of Oracle PeopleSoft (component	82d ago
CVE-2026-61073	7.5	—	—	—	oracle / peoplesoft enterprise fin common objects	Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Purc	82d ago
CVE-2026-61026	7.5	—	—	—	oracle / irecruitment	Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).	82d ago
CVE-2026-60988	7.5	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	82d ago
CVE-2026-60943	7.5	—	—	—	oracle / service fulfillment manager	Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment	82d ago
CVE-2026-60931	7.5	—	—	—	oracle / public sector financials	Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Opera	82d ago
CVE-2026-60927	7.5	—	—	—	oracle / public sector financials	Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Opera	82d ago
CVE-2026-60894	7.5	—	—	—	oracle / payroll	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).	82d ago
CVE-2026-60859	7.5	—	—	—	oracle / quoting	Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Internal Operations).	82d ago
CVE-2026-60855	7.5	—	—	—	oracle / quality	Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).	82d ago
CVE-2026-60806	7.5	—	—	—	oracle / cost management	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Costing Transaction Err	82d ago
CVE-2026-60770	7.5	—	—	—	oracle / application object library	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).	82d ago
CVE-2026-60704	7.5	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).	82d ago
CVE-2026-60689	7.5	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).	82d ago
CVE-2026-60658	7.5	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	82d ago
CVE-2026-60629	7.5	—	—	—	oracle / jdeveloper	Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools).	82d ago
CVE-2026-60622	7.5	—	—	—	oracle / jdeveloper	Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).	82d ago
CVE-2026-60619	7.5	—	—	—	oracle / jd edwards enterpriseone hcm foundation	Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: Time Account	82d ago
CVE-2026-60605	7.5	—	—	—	oracle / peoplesoft enterprise campus software campus community	Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed S	82d ago
CVE-2026-60604	7.5	—	—	—	oracle / peoplesoft enterprise campus software campus community	Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security).	82d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker