Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83381 | medium | 4.8 | No | Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1... | 2026-10-27 |
| CVE-2026-83380 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS).... | 2026-10-27 |
| CVE-2026-83378 | medium | 4.8 | No | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27.... | 2026-10-27 |
| CVE-2026-83377 | medium | 5.4 | No | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications). Supported versions that are affec... | 2026-10-27 |
| CVE-2026-83376 | low | 3.7 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).... | 2026-10-27 |
| CVE-2026-83375 | medium | 6.0 | No | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). The supported... | 2026-10-27 |
| CVE-2026-83374 | medium | 5.9 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit... | 2026-10-27 |
| CVE-2026-7025 | high | 7.3 | No | A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Ser... | 2026-10-27 |
| CVE-2026-83371 | medium | 5.4 | No | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec... | 2026-10-27 |
| CVE-2026-83370 | high | 7.5 | No | Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2... | 2026-10-27 |
| CVE-2026-83366 | high | 7.4 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-27 |
| CVE-2026-117541 | medium | 5.3 | No | svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash callers by submitting wel... | 2026-10-27 |
| CVE-2026-113732 | high | 7.8 | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(... | 2026-10-27 |
| CVE-2026-113728 | high | 7.5 | No | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint... | 2026-10-27 |
| CVE-2026-113723 | not reported | — | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable... | 2026-10-27 |
| CVE-2026-113718 | not reported | — | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to writ... | 2026-10-27 |
| CVE-2026-113713 | not reported | — | No | virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an enviro... | 2026-10-27 |
| CVE-2026-109708 | critical | 9.6 | No | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 15... | 2026-10-27 |
| CVE-2026-109707 | critical | 9.6 | No | Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbir... | 2026-10-27 |
| CVE-2026-109705 | critical | 9.6 | No | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability wa... | 2026-10-27 |