Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-101716 medium 5.3 No Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.... 2026-10-22
CVE-2026-101707 high 7.4 No Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are... 2026-10-22
CVE-2026-101703 high 7.5 No Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.... 2026-10-22
CVE-2026-101699 high 7.5 No Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are af... 2026-10-22
CVE-2026-101698 high 7.5 No Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions th... 2026-10-22
CVE-2026-101696 medium 6.8 No Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are aff... 2026-10-22
CVE-2026-101694 high 7.2 No Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... 2026-10-22
CVE-2026-101690 high 8.2 No Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported... 2026-10-22
CVE-2026-101688 high 8.6 No Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported... 2026-10-22
CVE-2020-21012 critical 9.8 No Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execut... 2026-10-22
CVE-2026-77228 not reported — No Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-10-22
CVE-2026-77227 not reported — No Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-10-22
CVE-2026-77225 not reported — No Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-10-22
CVE-2026-98126 medium 5.5 No In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOC_FL_ZERO_RANGE... 2026-10-22
CVE-2026-98127 medium 5.5 No In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does... 2026-10-22
CVE-2026-114045 high 8.8 No FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server... 2026-10-22
CVE-2026-114405 not reported — No Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 3... 2026-10-22
CVE-2026-113081 high 8.8 No Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox... 2026-10-22
CVE-2026-98130 high 8.1 No In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START The SCTP_CMD_TIMER_STA... 2026-10-22
CVE-2026-106017 not reported — No Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage r... 2026-10-22