Browse CVEs

HIGH 8.3 CVE-2026-41270 Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) protect… Flowise 3.1.0+ Fix from $1,9502026-04-23 MEDIUM 5.4 CVE-2026-41243 OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `safeMode` is enabled, unapproved… Openlearn 2026-04-14+ Fix from $1,6002026-04-23 HIGH 7.0 CVE-2026-41166 OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.1, a user who has `write:admin` in one Keycloak realm can call the Ma… Openremote 1.22.1+ Fix from $1,9502026-04-22 MEDIUM 6.5 CVE-2026-31192 Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user da… Raindrop Mitigation only Fix from $1,6002026-04-22 HIGH 7.5 CVE-2026-22754 Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/servlet-path" pattern="/endpoint/**"/> to define th… Spring Security 7.0.5+ Fix from $1,9502026-04-22 HIGH 7.5 CVE-2026-35251 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Diff… Vm Virtualbox Mitigation only Fix from $1,9502026-04-21 MEDIUM 6.4 CVE-2026-35252 Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API). Supported versions that are affected… Fusion Middleware Mitigation only Fix from $1,6002026-04-21 HIGH 7.5 CVE-2026-35242 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Diff… Vm Virtualbox Mitigation only Fix from $1,9502026-04-21 HIGH 7.8 CVE-2026-35243 Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions t… Application Development Framework Mitigation only Fix from $1,9502026-04-21 MEDIUM 5.2 CVE-2026-35244 Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version … Hyperion Infrastructure Technology Mitigation only Fix from $1,6002026-04-21 HIGH 7.5 CVE-2026-35245 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easi… Vm Virtualbox Mitigation only Fix from $1,9502026-04-21 HIGH 7.5 CVE-2026-35246 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Diff… Vm Virtualbox Mitigation only Fix from $1,9502026-04-21 MEDIUM 6.0 CVE-2026-35247 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easi… Vm Virtualbox Mitigation only Fix from $1,6002026-04-21 MEDIUM 5.0 CVE-2026-35248 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Diff… Vm Virtualbox Mitigation only Fix from $1,6002026-04-21 MEDIUM 5.7 CVE-2026-35241 Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version th… Peoplesoft Enterprise Cs Student Records Mitigation only Fix from $1,6002026-04-21 MEDIUM 6.5 CVE-2026-34324 Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). Supported versions that are af… Life Sciences Inform Mitigation only Fix from $1,6002026-04-21 MEDIUM 6.8 CVE-2026-34325 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: U… Financial Services Analytical Applications Infrastructure Mitigation only Fix from $1,6002026-04-21 HIGH 7.5 CVE-2026-35229 Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploi… Java Virtual Machine after 21.21 Fix from $1,9502026-04-21 HIGH 7.5 CVE-2026-35230 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Diff… Vm Virtualbox Mitigation only Fix from $1,9502026-04-21 HIGH 7.5 CVE-2026-35231 Vulnerability in the Oracle Financial Services Transaction Filtering product of Oracle Financial Services Applications (component: User Interface). … Financial Services Transaction Filtering Mitigation only Fix from $1,9502026-04-21 MEDIUM 5.4 CVE-2026-35232 Vulnerability in Oracle Fusion Middleware (component: Dynamic Monitoring Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0… Fusion Middleware Mitigation only Fix from $1,6002026-04-21 MEDIUM 6.3 CVE-2026-34323 Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions tha… Life Sciences Inform Mitigation only Fix from $1,6002026-04-21 MEDIUM 5.4 CVE-2026-34307 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are … Peoplesoft Enterprise Peopletools Mitigation only Fix from $1,6002026-04-21 HIGH 8.1 CVE-2026-34309 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are … Peoplesoft Enterprise Peopletools Mitigation only Fix from $1,9502026-04-21 HIGH 7.5 CVE-2026-34310 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: P… Financial Services Analytical Applications Infrastructure Mitigation only Fix from $1,9502026-04-21 MEDIUM 6.8 CVE-2026-34314 Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: P… Financial Services Analytical Applications Infrastructure Mitigation only Fix from $1,6002026-04-21 MEDIUM 6.5 CVE-2026-34299 Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supporte… Peoplesoft Enterprise Fin Maintenance Management Mitigation only Fix from $1,6002026-04-21 MEDIUM 6.5 CVE-2026-34301 Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supporte… Peoplesoft Enterprise Fin Maintenance Management Mitigation only Fix from $1,6002026-04-21 MEDIUM 5.5 CVE-2026-34302 Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.… Workflow after 12.2.15 Fix from $1,6002026-04-21 MEDIUM 6.5 CVE-2026-34306 Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is af… Peoplesoft Enterprise Fin Project Costing Mitigation only Fix from $1,6002026-04-21