CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-76224	8.8	high	—	ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) contains a remote code execution vulnerability in it	17d ago
CVE-2026-76221	8.8	high	gitpython project / gitpython	GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows at	17d ago
CVE-2026-76220	8.8	high	gitpython project / gitpython	GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be b	17d ago
CVE-2026-75918	8.8	high	phpmyfaq / phpmyfaq	phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is en	17d ago
CVE-2026-71694	8.8	high	—	An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68	17d ago
CVE-2026-54795	8.8	high	dell / openmanage enterprise	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used	17d ago
CVE-2024-58376	8.8	high	—	Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's regis	17d ago
CVE-2026-49427	8.8	high	freebsd / freebsd	Pages belonging to largepage shared memory objects were not explicitly wired.	17d ago
CVE-2026-49420	8.8	high	freebsd / freebsd	The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether th	17d ago
CVE-2026-19842	8.8	high	—	The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before stor	17d ago
CVE-2026-16617	8.8	high	—	The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description be	17d ago
CVE-2026-14334	8.8	high	—	The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize upload	17d ago
CVE-2026-70408	8.8	high	—	An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that h	18d ago
CVE-2026-49419	8.8	high	freebsd / freebsd	When the JAIL_AT_DESC flag is specified, kern_jail_set() and kern_jail_get() released the reference to the caller'	18d ago
CVE-2026-49418	8.8	high	freebsd / freebsd	When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping	18d ago
CVE-2026-49415	8.8	high	freebsd / freebsd	During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are u	18d ago
CVE-2026-66602	8.8	high	—	Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site	18d ago
CVE-2026-52876	8.8	high	—	Streambert is a cross-platform Electron Desktop App to stream and download video content.	18d ago
CVE-2026-52872	8.8	high	—	Streambert is a cross-platform Electron Desktop App to stream and download video content.	18d ago
CVE-2026-50191	8.8	high	—	4gaBoards is a boards system for realtime project management.	18d ago
CVE-2026-50186	8.8	high	—	4gaBoards is a boards system for realtime project management.	18d ago
CVE-2026-15315	8.8	high	tp-link / tapo c120 firmware	Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verifica	18d ago
CVE-2026-76047	8.8	high	google / chrome	Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code	18d ago
CVE-2026-76045	8.8	high	google / chrome	Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary co	18d ago
CVE-2026-76043	8.8	high	google / chrome	Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrar	18d ago
CVE-2026-76040	8.8	high	google / chrome	Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging	18d ago
CVE-2026-76038	8.8	high	google / chrome	Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code	18d ago
CVE-2026-76034	8.8	high	google / chrome	Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary c	18d ago
CVE-2026-71150	8.8	high	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-71106	8.8	high	oracle / hospitality opera 5 property services	Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (comp	18d ago
CVE-2026-71067	8.8	high	oracle / agile plm mcad connector	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).	18d ago
CVE-2026-71058	8.8	high	oracle / bi publisher	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).	18d ago
CVE-2026-71055	8.8	high	oracle / business intelligence	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platf	18d ago
CVE-2026-71052	8.8	high	oracle / agile engineering data management	Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Servi	18d ago
CVE-2026-71051	8.8	high	oracle / product lifecycle analytics	Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Is	18d ago
CVE-2026-71046	8.8	high	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).	18d ago
CVE-2026-71045	8.8	high	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).	18d ago
CVE-2026-71044	8.8	high	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export).	18d ago
CVE-2026-71039	8.8	high	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).	18d ago
CVE-2026-70966	8.8	high	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-70965	8.8	high	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-70956	8.8	high	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-70951	8.8	high	oracle / siebel crm	Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management).	18d ago
CVE-2026-70949	8.8	high	oracle / siebel crm	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).	18d ago
CVE-2026-70948	8.8	high	oracle / purchasing	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).	18d ago
CVE-2026-70944	8.8	high	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70941	8.8	high	oracle / payroll	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70940	8.8	high	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70928	8.8	high	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70922	8.8	high	—	Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services App	18d ago
CVE-2026-70918	8.8	high	oracle / product hub	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data).	18d ago
CVE-2026-70899	8.8	high	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	18d ago
CVE-2026-70886	8.8	high	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	18d ago
CVE-2026-70877	8.8	high	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	18d ago
CVE-2026-70874	8.8	high	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	18d ago
CVE-2026-70863	8.8	high	oracle / application testing suite	Vulnerability in Oracle Application Testing Suite.	18d ago
CVE-2026-70821	8.8	high	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70819	8.8	high	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70818	8.8	high	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70813	8.8	high	oracle / e-business suite	Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operati	18d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker