Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83170 | high | 8.0 | No | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are af... | 2026-09-17 |
| CVE-2026-83169 | high | 8.1 | No | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions th... | 2026-09-17 |
| CVE-2026-83168 | high | 8.8 | No | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported ve... | 2026-09-17 |
| CVE-2026-83150 | high | 7.0 | No | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability al... | 2026-09-17 |
| CVE-2026-83148 | high | 8.8 | No | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allo... | 2026-09-17 |
| CVE-2026-83147 | high | 7.8 | No | Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version t... | 2026-09-17 |
| CVE-2026-83121 | high | 8.8 | No | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.... | 2026-09-17 |
| CVE-2026-83120 | high | 8.8 | No | Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected... | 2026-09-17 |
| CVE-2026-83119 | high | 8.8 | No | Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are... | 2026-09-17 |
| CVE-2026-83117 | high | 7.2 | No | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are... | 2026-09-17 |
| CVE-2026-83114 | high | 7.5 | No | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-09-17 |
| CVE-2026-83112 | high | 7.2 | No | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported vers... | 2026-09-17 |
| CVE-2026-57138 | critical | 9.9 | No | PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untru... | 2026-09-17 |
| CVE-2026-15758 | medium | 5.3 | No | The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Expo... | 2026-09-17 |
| CVE-2026-84962 | medium | 4.2 | No | An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls... | 2026-09-17 |
| CVE-2026-84971 | medium | 6.5 | No | Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check t... | 2026-09-17 |
| CVE-2026-91721 | high | 8.8 | No | Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside... | 2026-09-17 |
| CVE-2026-91718 | critical | 9.6 | No | Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a... | 2026-09-17 |
| CVE-2026-91717 | medium | 5.1 | No | Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive informat... | 2026-09-17 |
| CVE-2026-91716 | critical | 9.6 | No | Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a... | 2026-09-17 |