Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-19658 | critical | 9.8 | No | The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization... | 2026-09-22 |
| CVE-2026-13355 | critical | 9.8 | No | The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This... | 2026-09-22 |
| CVE-2026-94492 | medium | 6.3 | No | A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.sa... | 2026-09-22 |
| CVE-2026-94425 | high | 8.8 | No | A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library... | 2026-09-22 |
| CVE-2026-94424 | high | 8.8 | No | A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library... | 2026-09-22 |
| CVE-2026-94403 | high | 8.8 | No | A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the compon... | 2026-09-22 |
| CVE-2026-87153 | high | 8.1 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-87154 | high | 8.1 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-87155 | high | 8.8 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-87156 | high | 7.1 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-87163 | high | 8.8 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-87166 | high | 8.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-87167 | high | 8.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-87168 | high | 8.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-25294 | high | 7.4 | No | Transient DOS while parsing frame during channel usage. | 2026-09-22 |
| CVE-2026-25290 | high | 7.8 | No | Memory Corruption when validating large data buffers from external sources using addition to check buffer length. | 2026-09-22 |
| CVE-2026-25284 | high | 7.3 | No | Information Disclosure when a pointer is reused after being deallocated. | 2026-09-22 |
| CVE-2026-25283 | high | 8.8 | No | Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. | 2026-09-22 |
| CVE-2026-25282 | high | 7.9 | No | Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. | 2026-09-22 |
| CVE-2026-25281 | high | 7.4 | No | Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. | 2026-09-22 |