CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 6 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2025-69111	9.8	—	—	—	—	Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.	114d ago
CVE-2025-60236	9.8	—	—	—	—	Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection.	114d ago
CVE-2025-60231	9.8	—	—	—	—	Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection.	114d ago
CVE-2025-60230	9.8	—	—	—	—	Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection.	114d ago
CVE-2025-60229	9.8	—	—	—	—	Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection.	114d ago
CVE-2026-54807	9.8	—	—	—	—	Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.	114d ago
CVE-2026-54806	9.8	—	—	—	—	Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions.	114d ago
CVE-2026-54803	9.8	—	—	—	—	Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions.	114d ago
CVE-2026-54194	9.8	—	—	—	—	Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.	114d ago
CVE-2026-52706	9.8	—	—	—	—	Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.	114d ago
CVE-2026-49767	9.8	—	—	—	—	Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.	114d ago
CVE-2026-49107	9.8	—	—	—	—	Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.	114d ago
CVE-2026-49075	9.8	—	—	—	—	Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.	114d ago
CVE-2026-49058	9.8	—	—	—	—	Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.	114d ago
CVE-2026-42380	9.8	—	—	—	—	Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.	114d ago
CVE-2026-40725	9.8	—	—	—	—	Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.	114d ago
CVE-2026-39529	9.8	—	—	—	—	Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.	114d ago
CVE-2026-32966	9.8	—	—	—	apache / dolphinscheduler	DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinSch	114d ago
CVE-2026-27429	9.8	—	—	—	—	Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.	114d ago
CVE-2026-27395	9.8	—	—	—	—	Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.	114d ago
CVE-2026-10094	9.8	—	—	—	—	A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWO	114d ago
CVE-2025-69179	9.8	—	—	—	—	Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.	114d ago
CVE-2025-69122	9.8	—	—	—	—	Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.	114d ago
CVE-2025-69108	9.8	—	—	—	—	Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions.	114d ago
CVE-2025-60205	9.8	—	—	—	—	Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions.	114d ago
CVE-2026-46919	9.8	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).	114d ago
CVE-2026-46909	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46905	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security)	114d ago
CVE-2026-46904	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46902	9.8	—	—	—	oracle / enterprise command center framework	Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor	114d ago
CVE-2026-46890	9.8	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	114d ago
CVE-2026-46889	9.8	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	114d ago
CVE-2026-46887	9.8	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	114d ago
CVE-2026-46884	9.8	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	114d ago
CVE-2026-46883	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46882	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46881	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46880	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46879	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46878	9.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastruc	114d ago
CVE-2026-46860	9.8	—	—	—	oracle / mysql router	Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).	114d ago
CVE-2026-46859	9.8	—	—	—	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).	114d ago
CVE-2026-46857	9.8	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Orac	114d ago
CVE-2026-46845	9.8	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).	114d ago
CVE-2026-46813	9.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	114d ago
CVE-2026-46807	9.8	—	—	—	oracle / identity manager	Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).	114d ago
CVE-2026-46801	9.8	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	114d ago
CVE-2026-46799	9.8	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	114d ago
CVE-2026-46797	9.8	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	114d ago
CVE-2026-46783	9.8	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	114d ago
CVE-2026-46774	9.8	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	114d ago
CVE-2026-46773	9.8	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	114d ago
CVE-2026-46766	9.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	114d ago
CVE-2026-35319	9.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	114d ago
CVE-2026-35312	9.8	—	—	—	oracle / virtual directory	Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Se	114d ago
CVE-2026-35310	9.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	114d ago
CVE-2026-35309	9.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars	114d ago
CVE-2026-35304	9.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	114d ago
CVE-2026-35300	9.8	—	—	—	oracle / weblogic server	Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).	114d ago
CVE-2026-35296	9.8	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	114d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker