Latest vulnerabilities

26,235 results · Clear filters · Feed

• Critical 9.0
  CVE-2026-61029

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Aug 18, 2026
• Critical 9.8
  CVE-2026-61018

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Aug 18, 2026
• Critical 9.9
  CVE-2026-61021

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Aug 18, 2026
• Critical 9.1
  CVE-2026-61008

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported…

  Oracle Oracle WebCenter Sites
  Aug 18, 2026
• Critical 9.9
  CVE-2026-61003

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). …

  Oracle Oracle Managed File Transfer
  Aug 18, 2026
• Critical 9.6
  CVE-2026-61001

  Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security)…

  Oracle Oracle Web Services Manager
  Aug 18, 2026
• Critical 9.9
  CVE-2026-60995

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported…

  Oracle Oracle Identity Manager Connector
  Aug 18, 2026
• Critical 9.9
  CVE-2026-60990

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported…

  Oracle Oracle Identity Manager Connector
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60977

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppo…

  Oracle Oracle WebLogic Server
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60971

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60970

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60958

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60946

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60947

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60921

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Aug 18, 2026
• Critical 9.9
  CVE-2026-60916

  Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle)…

  Oracle Oracle WebCenter Enterprise Capture
  Aug 18, 2026
• Critical 9.6
  CVE-2026-60905

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supporte…

  Oracle Oracle WebCenter Content
  Aug 18, 2026
• Critical 9.6
  CVE-2026-60861

  Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supp…

  Oracle Service Delivery Platform
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60858

  Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supporte…

  Oracle Oracle Hyperion Calculation Manager
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60821

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Su…

  Oracle PeopleSoft Enterprise PeopleTools
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60782

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi…

  Oracle Oracle Payments
  Aug 18, 2026
• Critical 9.1
  CVE-2026-60754

  Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions th…

  Oracle Siebel Apps - Marketing
  Aug 18, 2026
• Critical 9.9
  CVE-2026-60730

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versi…

  Oracle Oracle WebCenter Portal
  Aug 18, 2026
• Critical 9.1
  CVE-2026-60737

  Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security)…

  Oracle Oracle Web Services Manager
  Aug 18, 2026
• Critical 9.1
  CVE-2026-60728

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Support…

  Oracle Oracle WebCenter Portal
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60727

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60721

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Aug 18, 2026
• Critical 9.9
  CVE-2026-60720

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported …

  Oracle Oracle Identity Manager
  Aug 18, 2026
• Critical 9.9
  CVE-2026-60702

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60696

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60698

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Aug 18, 2026
• Critical 9.1
  CVE-2026-60591

  Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Sup…

  Oracle Oracle Hospitality Simphony
  Aug 18, 2026
• Critical 9.8
  CVE-2026-60672

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

  Oracle Oracle WebLogic Server
  Aug 18, 2026
• Critical 9.6
  CVE-2026-76035

  Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to e…

  Google Chrome chromium Browsers Debian
  Aug 18, 2026
• Critical 9.6
  CVE-2026-76036

  Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arb…

  Google Chrome chromium Browsers Debian
  Aug 18, 2026
• Critical 9.0
  CVE-2026-62988

  Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints

  Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API commands in lib/Froxlor/Api/Commands/Customers.php, lib/Froxlor/Api/Commands/Admins…

  froxlor froxlor froxlor/froxlor Packagist
  Aug 18, 2026
• Critical 9.2
  CVE-2026-67443

  FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)

  FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When node…

  frangoteam FUXA
  Aug 18, 2026
• Critical 9.9
  CVE-2026-75877

  TRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflow

  A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN_00432574/FUN_0043372C of the component alphapd. Executing a manipulat…

  Trendnet TV-IP751WIC
  Aug 18, 2026
• Critical 9.3
  CVE-2026-52735

  ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

  ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/sr…

  ZcashFoundation zebra zebrad zebra-script crates.io
  Aug 18, 2026
• Critical 9.9
  CVE-2026-55166

  Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR

  Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acme_url without an effective server-side destination restriction and trigger AcmeHandler.setup_acme_client to make backend requests. An attacker cou…

  Netflix lemur lemur PyPI
  Aug 18, 2026