CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 6 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-59517	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions.	78d ago
CVE-2026-59512	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions.	78d ago
CVE-2026-57809	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.	78d ago
CVE-2026-57769	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.	78d ago
CVE-2026-57767	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.	78d ago
CVE-2026-57735	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.	78d ago
CVE-2026-57704	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.	78d ago
CVE-2026-57701	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.	78d ago
CVE-2026-57699	7.1	—	—	—	—	Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions.	78d ago
CVE-2026-57696	7.1	—	—	—	—	Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.	78d ago
CVE-2026-57626	7.1	—	—	—	—	Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery.	78d ago
CVE-2026-57428	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.	78d ago
CVE-2026-57427	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.	78d ago
CVE-2026-57397	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.	78d ago
CVE-2026-57374	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.	78d ago
CVE-2026-57370	7.1	—	—	—	—	Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions.	78d ago
CVE-2026-57367	7.1	—	—	—	—	Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.	78d ago
CVE-2026-13077	7.1	—	—	—	mongodb / mongodb	A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds hea	78d ago
CVE-2026-64833	7.1	—	—	—	ffmpeg / ffmpeg	FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows at	78d ago
CVE-2026-48029	7.1	—	—	—	struktur / libheif	libheif is a HEIF and AVIF file format decoder and encoder.	78d ago
CVE-2026-62565	7.1	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End).	79d ago
CVE-2026-62557	7.1	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).	79d ago
CVE-2026-62469	7.1	—	—	—	oracle / human resources	Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Cent	79d ago
CVE-2026-62443	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operatio	79d ago
CVE-2026-61334	7.1	—	—	—	oracle / price protection	Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).	79d ago
CVE-2026-61299	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Interna	79d ago
CVE-2026-61165	7.1	—	—	—	oracle / commerce guided search platform services	Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge)	79d ago
CVE-2026-61162	7.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	79d ago
CVE-2026-61151	7.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	79d ago
CVE-2026-61119	7.1	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).	79d ago
CVE-2026-61095	7.1	—	—	—	oracle / communications unified inventory management	Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (componen	79d ago
CVE-2026-61049	7.1	—	—	—	oracle / production scheduling	Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operatio	79d ago
CVE-2026-61012	7.1	—	—	—	oracle / time and labor	Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).	79d ago
CVE-2026-60987	7.1	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	79d ago
CVE-2026-60985	7.1	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	79d ago
CVE-2026-60984	7.1	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	79d ago
CVE-2026-60908	7.1	—	—	—	oracle / installed base	Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).	79d ago
CVE-2026-60870	7.1	—	—	—	oracle / advanced pricing	Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).	79d ago
CVE-2026-60868	7.1	—	—	—	oracle / advanced pricing	Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).	79d ago
CVE-2026-60838	7.1	—	—	—	oracle / price protection	Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).	79d ago
CVE-2026-60834	7.1	—	—	—	oracle / solaris	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).	79d ago
CVE-2026-60800	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Wor	79d ago
CVE-2026-60799	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Wor	79d ago
CVE-2026-60774	7.1	—	—	—	oracle / applications framework	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Inc	79d ago
CVE-2026-60772	7.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Compon	79d ago
CVE-2026-60739	7.1	—	—	—	oracle / field service	Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).	79d ago
CVE-2026-60703	7.1	—	—	—	oracle / interaction blending	Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operation	79d ago
CVE-2026-60659	7.1	—	—	—	oracle / solaris	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).	79d ago
CVE-2026-60647	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Manageme	79d ago
CVE-2026-60623	7.1	—	—	—	oracle / mysql connector\/j	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).	79d ago
CVE-2026-60614	7.1	—	—	—	oracle / peoplesoft enterprise campus software campus community	Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Person Dat	79d ago
CVE-2026-60577	7.1	—	—	—	oracle / enterprise command center framework	Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor	79d ago
CVE-2026-60527	7.1	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).	79d ago
CVE-2026-60492	7.1	—	—	—	oracle / jd edwards enterpriseone hcm foundation	Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: OW HR PR Fou	79d ago
CVE-2026-60468	7.1	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	79d ago
CVE-2026-60451	7.1	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	79d ago
CVE-2026-60449	7.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	79d ago
CVE-2026-60305	7.1	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	79d ago
CVE-2026-60176	7.1	—	—	—	oracle / payments	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).	79d ago
CVE-2026-47015	7.1	—	—	—	oracle / peoplesoft enterprise peopletools	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technolog	79d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker