CVE Vulnerability Database
Search and browse 423,188 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-60809 | MEDIUM | 4.2 | 0.1% | Oct 20, 2026 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported ve... |
| CVE-2026-60746 | MEDIUM | 5.9 | 0.2% | Oct 20, 2026 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). ... |
| CVE-2026-60745 | MEDIUM | 4.4 | 0.2% | Oct 20, 2026 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE... |
| CVE-2026-60743 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported ve... |
| CVE-2026-60662 | HIGH | 7.8 | 0.2% | Oct 20, 2026 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is aff... |
| CVE-2026-60500 | MEDIUM | 5.8 | 0.3% | Oct 20, 2026 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported ... |
| CVE-2026-60453 | MEDIUM | 5.3 | 0.1% | Oct 20, 2026 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that... |
| CVE-2026-60432 | CRITICAL | 9.8 | 0.4% | Oct 20, 2026 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions t... |
| CVE-2026-47025 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affecte... |
| CVE-2026-113812 | CRITICAL | 9.1 | 0.2% | Oct 20, 2026 | Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised in... |
| CVE-2026-113776 | HIGH | 7.8 | 0.3% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator... |
| CVE-2026-113732 | HIGH | 7.8 | 0.2% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemp... |
| CVE-2026-113731 | LOW | 3.3 | 0.2% | Oct 20, 2026 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.... |
| CVE-2026-113730 | MEDIUM | 5.6 | 0.4% | Oct 20, 2026 | OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRunti... |
| CVE-2026-113729 | HIGH | 7.5 | 0.5% | Oct 20, 2026 | Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in ex... |
| CVE-2026-113728 | HIGH | 7.5 | 0.5% | Oct 20, 2026 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/... |
| CVE-2026-113727 | HIGH | 7.4 | 0.4% | Oct 20, 2026 | OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{r... |
| CVE-2026-113726 | HIGH | 7.8 | 0.3% | Oct 20, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that ... |
| CVE-2026-113704 | HIGH | 7.3 | 0.5% | Oct 20, 2026 | A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file cr... |
| CVE-2026-113344 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory... |
| CVE-2026-113343 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised... |
| CVE-2026-113342 | CRITICAL | 9.6 | 0.5% | Oct 20, 2026 | Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engin... |
| CVE-2026-113341 | MEDIUM | 6.5 | 0.4% | Oct 20, 2026 | Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitr... |
| CVE-2026-113340 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read ... |
| CVE-2026-113339 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary... |