Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101843 | medium | 4.5 | No | Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are... | 2026-10-27 |
| CVE-2026-101840 | high | 7.2 | No | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Suppor... | 2026-10-27 |
| CVE-2026-101837 | high | 7.7 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-27 |
| CVE-2026-101836 | medium | 6.5 | No | Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec... | 2026-10-27 |
| CVE-2026-101835 | high | 7.5 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-27 |
| CVE-2026-101833 | high | 7.6 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that... | 2026-10-27 |
| CVE-2026-101832 | medium | 6.5 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions th... | 2026-10-27 |
| CVE-2026-101387 | high | 7.6 | No | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affect... | 2026-10-27 |
| CVE-2026-101386 | medium | 4.2 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit v... | 2026-10-27 |
| CVE-2026-101385 | medium | 4.9 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... | 2026-10-27 |
| CVE-2026-101384 | medium | 5.0 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... | 2026-10-27 |
| CVE-2026-101383 | medium | 5.4 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... | 2026-10-27 |
| CVE-2026-101382 | medium | 4.2 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit v... | 2026-10-27 |
| CVE-2026-101381 | medium | 5.4 | No | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vuln... | 2026-10-27 |
| CVE-2016-20101 | high | 8.1 | No | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include r... | 2026-10-27 |
| CVE-2015-20123 | high | 7.5 | No | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to downloa... | 2026-10-27 |
| CVE-2012-20005 | medium | 6.1 | No | SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers t... | 2026-10-27 |
| CVE-2026-18526 | not reported | — | No | HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scripting (XSS) vulnerability in the oEmbed confirmation renderin... | 2026-10-27 |
| CVE-2026-16816 | critical | 9.9 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neut... | 2026-10-27 |
| CVE-2026-16814 | high | 8.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. | 2026-10-27 |