Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101841 | high | 8.2 | No | Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions that are affecte... | 2026-10-29 |
| CVE-2026-101834 | high | 8.1 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-29 |
| CVE-2025-30414 | high | 7.1 | No | Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows)... | 2026-10-29 |
| CVE-2026-101831 | high | 8.1 | No | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-10-29 |
| CVE-2026-101567 | high | 8.8 | No | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affec... | 2026-10-29 |
| CVE-2026-101557 | high | 8.8 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affe... | 2026-10-29 |
| CVE-2026-37982 | medium | 6.8 | No | A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay `ExecuteActionsActionToken` tokens within... | 2026-10-29 |
| CVE-2026-37979 | medium | 6.5 | No | A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect (OIDC) token introspection endpoint allows a co... | 2026-10-29 |
| CVE-2026-114236 | low | 3.3 | No | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounde... | 2026-10-29 |
| CVE-2025-49794 | critical | 9.1 | No | A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML... | 2026-10-29 |
| CVE-2026-117174 | not reported | — | No | Rejected reason: VUL-2026-008368 為先回報之相同問題 | 2026-10-29 |
| CVE-2026-32557 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooCommerce Appointments woo... | 2026-10-29 |
| CVE-2024-0340 | medium | 5.5 | No | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messag... | 2026-10-29 |
| CVE-2026-97320 | medium | 6.3 | No | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceIm... | 2026-10-29 |
| CVE-2026-117688 | medium | 5.3 | No | A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault prov... | 2026-10-29 |
| CVE-2026-117627 | medium | 5.4 | No | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider... | 2026-10-29 |
| CVE-2026-117548 | medium | 6.5 | No | A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema ali... | 2026-10-29 |
| CVE-2024-3727 | high | 8.3 | No | A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesse... | 2026-10-29 |
| CVE-2024-3056 | high | 7.7 | No | A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same... | 2026-10-29 |
| CVE-2024-1394 | high | 7.5 | No | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using... | 2026-10-29 |