Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87380 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order Entry). The supported v... | 2026-10-28 |
| CVE-2026-87379 | medium | 4.3 | No | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected... | 2026-10-28 |
| CVE-2026-87378 | medium | 6.5 | No | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected... | 2026-10-28 |
| CVE-2026-87377 | medium | 6.8 | No | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affecte... | 2026-10-28 |
| CVE-2026-87376 | medium | 6.8 | No | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affecte... | 2026-10-28 |
| CVE-2026-87375 | medium | 6.5 | No | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected... | 2026-10-28 |
| CVE-2026-87374 | medium | 6.8 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-87372 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-87371 | medium | 6.8 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-87370 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-114091 | medium | 5.3 | No | Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the lookup to the calle... | 2026-10-28 |
| CVE-2026-87367 | low | 3.7 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).... | 2026-10-28 |
| CVE-2026-87366 | medium | 4.9 | No | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that ar... | 2026-10-28 |
| CVE-2026-87365 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-87364 | high | 8.8 | No | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2... | 2026-10-28 |
| CVE-2026-113776 | high | 7.8 | No | virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_templat... | 2026-10-28 |
| CVE-2026-113738 | medium | 6.3 | No | A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability... | 2026-10-28 |
| CVE-2026-113707 | medium | 5.4 | No | A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the... | 2026-10-28 |
| CVE-2026-113672 | critical | 9.9 | No | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-se... | 2026-10-28 |
| CVE-2026-112945 | not reported | — | No | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, applications using custom middleware ar... | 2026-10-28 |