Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-60790 | medium | 6.5 | No | ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted witho... | 2026-10-27 |
| CVE-2025-60751 | high | 7.5 | No | GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. | 2026-10-27 |
| CVE-2025-60934 | medium | 6.1 | No | Multiple stored cross-site scripting (XSS) vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 a... | 2026-10-27 |
| CVE-2026-91506 | high | 8.1 | No | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affe... | 2026-10-27 |
| CVE-2026-91474 | medium | 6.1 | No | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported v... | 2026-10-27 |
| CVE-2026-91466 | medium | 6.4 | No | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management). The supp... | 2026-10-27 |
| CVE-2026-91323 | critical | 9.8 | No | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are... | 2026-10-27 |
| CVE-2026-87408 | high | 8.7 | No | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that... | 2026-10-27 |
| CVE-2026-83379 | high | 8.7 | No | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for... | 2026-10-27 |
| CVE-2026-116612 | high | 7.8 | No | A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed an arbitrary GStreamer pipeline descript... | 2026-10-27 |
| CVE-2026-110063 | critical | 10.0 | No | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to... | 2026-10-27 |
| CVE-2026-107656 | critical | 9.8 | No | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t... | 2026-10-27 |
| CVE-2026-101824 | high | 8.7 | No | Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions t... | 2026-10-27 |
| CVE-2026-101704 | high | 8.2 | No | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affecte... | 2026-10-27 |
| CVE-2026-101700 | high | 8.1 | No | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are aff... | 2026-10-27 |
| CVE-2026-101684 | high | 8.3 | No | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations). Sup... | 2026-10-27 |
| CVE-2026-101672 | high | 8.1 | No | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions t... | 2026-10-27 |
| CVE-2026-101665 | high | 8.1 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-27 |
| CVE-2026-101648 | high | 8.4 | No | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that... | 2026-10-27 |
| CVE-2026-111147 | medium | 6.1 | No | Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers... | 2026-10-27 |