Browse CVEs

MEDIUM 6.5 CVE-2026-60324 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My… Mysql Server No fix yet Fix from $1,6002026-07-21 HIGH 7.5 CVE-2026-60314 Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.10 and 9… Mysql Router after 8.4.10 Fix from $1,9502026-07-21 MEDIUM 6.5 CVE-2026-60311 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My… Mysql Server No fix yet Fix from $1,6002026-07-21 HIGH 7.5 CVE-2026-60301 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14… Coherence No fix yet Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-60252 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14… Coherence No fix yet Fix from $1,9502026-07-21 MEDIUM 6.5 CVE-2026-60243 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14… Coherence No fix yet Fix from $1,6002026-07-21 CRITICAL 9.1 CVE-2026-60208 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4… Weblogic Server Mitigation only Fix from $2,3002026-07-21 MEDIUM 6.5 CVE-2026-60213 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14… Coherence No fix yet Fix from $1,6002026-07-21 MEDIUM 6.5 CVE-2026-60174 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My… Mysql Server No fix yet Fix from $1,6002026-07-21 HIGH 7.5 CVE-2026-60180 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Easi… Mysql Connector\/c\+\+ after 9.7.1 Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-55851 Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to (but not including) 4.2.16.Fi… Netty 4.1.136 / 4.2.16+ Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-56745 Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Fina… Netty 4.1.136 / 4.2.16+ Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-56816 Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's `Http3FrameCodec` buffers in… Netty 4.2.16+ Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-47057 Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Eas… Jre No fix yet Fix from $1,9502026-07-21 MEDIUM 5.5 CVE-2026-47044 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Eas… Vm Virtualbox No fix yet Fix from $1,6002026-07-21 HIGH 8.2 CVE-2026-47046 Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerab… Database Server after 23.26.2 Fix from $1,9502026-07-21 MEDIUM 6.0 CVE-2026-47041 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Eas… Vm Virtualbox No fix yet Fix from $1,6002026-07-21 HIGH 7.5 CVE-2026-47018 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affec… Siebel Crm after 26.5 Fix from $1,9502026-07-21 MEDIUM 5.3 CVE-2026-47021 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported … Jre No fix yet Fix from $1,6002026-07-21 MEDIUM 6.5 CVE-2026-10675 In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdo… Zephyr after 4.4.1 Fix from $1,6002026-07-21 MEDIUM 6.5 CVE-2026-63136 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search p… Elasticsearch 8.19.15 / 9.2.9+ Fix from $1,6002026-07-21 MEDIUM 6.5 CVE-2026-63139 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privil… Kibana 8.19.19 / 9.3.8+ Fix from $1,6002026-07-21 MEDIUM 6.5 CVE-2026-56145 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged aut… Elasticsearch 8.19.18 / 9.3.7+ Fix from $1,6002026-07-21 MEDIUM 6.5 CVE-2026-21577 This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2… Confluence Data Center after 10.2.6 Fix from $1,6002026-07-21 HIGH 7.5 CVE-2026-16376 Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. Firefox 153.0 / 153.0.0+ Fix from $1,9502026-07-21 MEDIUM 6.5 CVE-2026-59843 A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel write… Hardened Images No fix yet Fix from $1,6002026-07-21 HIGH 7.5 CVE-2026-55831 Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTI… Netty 4.1.136 / 4.2.16+ Fix from $1,9502026-07-21 HIGH 7.5 CVE-2026-55833 Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header … Netty 4.1.136 / 4.2.16+ Fix from $1,9502026-07-21 HIGH 7.5 CVE-2024-51316 The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the file /goform/SetOnlineDevName No fix yet Fix from $1,9502026-07-20 MEDIUM 5.3 CVE-2026-53596 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the FreeScout helpdesk application does … No fix yet Fix from $1,6002026-07-20