CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-19506	8.1	—	—	—	—	Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain una	70d ago
CVE-2026-17414	8.1	—	—	—	ibm / power system s1122 \(9824-22a\) firmware	IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through F	70d ago
CVE-2026-17429	8.1	—	—	—	ibm / power system s1122 \(9824-22a\) firmware	IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through F	70d ago
CVE-2026-75146	8.1	—	—	—	—	FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c).	70d ago
CVE-2026-62667	8.1	—	—	—	—	Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.	70d ago
CVE-2026-15078	8.1	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX	70d ago
CVE-2026-76219	8.1	—	—	—	gitpython project / gitpython	GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFi	70d ago
CVE-2026-76207	8.1	—	—	—	phpmyfaq / phpmyfaq	phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issue	70d ago
CVE-2026-76205	8.1	—	—	—	phpmyfaq / phpmyfaq	phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by	70d ago
CVE-2026-70422	8.1	—	—	—	dell / openmanage enterprise	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used	70d ago
CVE-2026-73387	8.1	—	—	—	—	Unauthenticated Local File Inclusion in Resido <= 1.5 versions.	70d ago
CVE-2026-58086	8.1	—	—	—	freebsd / freebsd	As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user.	70d ago
CVE-2026-13169	8.1	—	—	—	—	The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be	70d ago
CVE-2026-19942	8.1	—	—	—	—	The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordP	70d ago
CVE-2026-21584	8.1	—	—	—	atlassian / bamboo	This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0,	71d ago
CVE-2026-71112	8.1	—	—	—	oracle / peoplesoft enterprise fin common objects	Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security).	71d ago
CVE-2026-71110	8.1	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-71068	8.1	—	—	—	oracle / agile plm mcad connector	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).	71d ago
CVE-2026-71053	8.1	—	—	—	oracle / agile engineering data management	Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Servi	71d ago
CVE-2026-71042	8.1	—	—	—	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin).	71d ago
CVE-2026-71035	8.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-70999	8.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	71d ago
CVE-2026-70959	8.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	71d ago
CVE-2026-70957	8.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	71d ago
CVE-2026-70943	8.1	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-70931	8.1	—	—	—	oracle / workflow	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).	71d ago
CVE-2026-70929	8.1	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-70925	8.1	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-70924	8.1	—	—	—	oracle / web services manager	Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Secu	71d ago
CVE-2026-70904	8.1	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70901	8.1	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70881	8.1	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70878	8.1	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70868	8.1	—	—	—	oracle / application testing suite	Vulnerability in Oracle Application Testing Suite.	71d ago
CVE-2026-70835	8.1	—	—	—	oracle / irecruitment	Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70830	8.1	—	—	—	oracle / process manufacturing systems	Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal	71d ago
CVE-2026-70815	8.1	—	—	—	oracle / internet procurement connector	Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal	71d ago
CVE-2026-70814	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operati	71d ago
CVE-2026-70811	8.1	—	—	—	oracle / purchasing	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70805	8.1	—	—	—	oracle / project planning and control	Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change Man	71d ago
CVE-2026-70795	8.1	—	—	—	oracle / applications platform engineering	Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: Valid	71d ago
CVE-2026-70782	8.1	—	—	—	oracle / labor distribution	Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations)	71d ago
CVE-2026-70762	8.1	—	—	—	oracle / risk management	Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70749	8.1	—	—	—	oracle / hyperion financial reporting	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).	71d ago
CVE-2026-70746	8.1	—	—	—	oracle / hyperion financial reporting	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).	71d ago
CVE-2026-70744	8.1	—	—	—	oracle / hyperion financial reporting	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).	71d ago
CVE-2026-70738	8.1	—	—	—	oracle / hyperion profitability and cost management	Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Depl	71d ago
CVE-2026-70708	8.1	—	—	—	oracle / sales foundation	Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).	71d ago
CVE-2026-70704	8.1	—	—	—	oracle / trading community	Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI).	71d ago
CVE-2026-70701	8.1	—	—	—	oracle / payables	Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70684	8.1	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agen	71d ago
CVE-2026-70675	8.1	—	—	—	oracle / reports developer	Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authent	71d ago
CVE-2026-70671	8.1	—	—	—	oracle / reports developer	Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authent	71d ago
CVE-2026-62600	8.1	—	—	—	oracle / sales	Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-62595	8.1	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).	71d ago
CVE-2026-62591	8.1	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).	71d ago
CVE-2026-62531	8.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Ma	71d ago
CVE-2026-62502	8.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Event	71d ago
CVE-2026-62501	8.1	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Event	71d ago
CVE-2026-62491	8.1	—	—	—	oracle / purchasing	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).	71d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker