Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101692 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-24 |
| CVE-2026-101686 | high | 8.8 | No | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported... | 2026-10-24 |
| CVE-2026-101685 | high | 8.8 | No | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported... | 2026-10-24 |
| CVE-2026-101664 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101656 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101655 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101654 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101653 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101635 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-91455 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported version... | 2026-10-24 |
| CVE-2026-106110 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer f... | 2026-10-24 |
| CVE-2026-106111 | medium | 5.3 | No | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate r... | 2026-10-24 |
| CVE-2026-106112 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCal... | 2026-10-24 |
| CVE-2026-106113 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image and applying... | 2026-10-24 |
| CVE-2026-106114 | medium | 5.3 | No | ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared ch... | 2026-10-24 |
| CVE-2026-106115 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even th... | 2026-10-24 |
| CVE-2026-106116 | medium | 5.3 | No | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates... | 2026-10-24 |
| CVE-2026-110734 | low | 2.5 | No | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The r... | 2026-10-24 |
| CVE-2026-9869 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0... | 2026-10-23 |
| CVE-2026-9827 | critical | 9.1 | No | A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504... | 2026-10-23 |