Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101670 | medium | 6.5 | No | Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affe... | 2026-10-21 |
| CVE-2026-101669 | medium | 6.8 | No | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported vers... | 2026-10-21 |
| CVE-2026-101668 | medium | 6.1 | No | Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are a... | 2026-10-21 |
| CVE-2026-101660 | high | 7.5 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-21 |
| CVE-2026-101640 | high | 8.2 | No | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.... | 2026-10-21 |
| CVE-2026-101634 | critical | 9.1 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-21 |
| CVE-2026-101379 | medium | 5.3 | No | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vuln... | 2026-10-21 |
| CVE-2024-45777 | medium | 6.7 | No | A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position()... | 2026-10-21 |
| CVE-2024-45776 | medium | 6.7 | No | When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A c... | 2026-10-21 |
| CVE-2024-45775 | medium | 5.2 | No | A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument... | 2026-10-21 |
| CVE-2024-45774 | medium | 6.7 | No | A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal... | 2026-10-21 |
| CVE-2026-112915 | medium | 5.5 | No | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database with... | 2026-10-21 |
| CVE-2026-98149 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array,... | 2026-10-21 |
| CVE-2026-98150 | high | 7.0 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the... | 2026-10-21 |
| CVE-2026-98151 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Ta... | 2026-10-21 |
| CVE-2026-95168 | high | 7.8 | No | An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and... | 2026-10-21 |
| CVE-2026-94416 | medium | 6.8 | No | An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated administrator to... | 2026-10-21 |
| CVE-2026-113470 | medium | 5.4 | No | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Fi... | 2026-10-21 |
| CVE-2026-98153 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info()... | 2026-10-21 |
| CVE-2026-102214 | high | 8.8 | No | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | 2026-10-21 |