Browse CVEs

CRITICAL 9.8 CVE-2026-60205 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4… Weblogic Server No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-60204 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4… Weblogic Server Mitigation only Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-60202 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4… Weblogic Server No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-60200 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4… Weblogic Server Mitigation only Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-60199 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4… Weblogic Server No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-60198 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4… Weblogic Server No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-60197 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14… Coherence No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-60173 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2… Bi Publisher No fix yet Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-60168 Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affe… Hospitality Simphony after 19.9.3 Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-47731 The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to … No fix yet Fix from $2,3002026-07-21 CRITICAL 10.0 CVE-2026-47056 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported versions that are affected are … Data Integrator No fix yet Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-47040 Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 2… Database Server after 23.26.2 Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-47036 Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected … Siebel Crm after 26.3 Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-46994 Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions th… Enterprise Manager Base Platform Mitigation only Fix from $2,3002026-07-21 CRITICAL 9.1 CVE-2026-46989 Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that… Enterprise Manager Base Platform Mitigation only Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-46983 Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is aff… Retail Integration Bus No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-46982 Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is aff… Retail Integration Bus No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-46924 Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unau… Application Testing Suite No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-46876 Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unau… Application Testing Suite No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-35290 Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unau… Application Testing Suite No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-8983 Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple manage… Maxicharger Single Charger Firmware after 1.03.51 Fix from $2,3002026-07-21 CRITICAL 9.3 CVE-2026-65057 Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary … Mitigation only Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-52472 SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file No fix yet Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-52470 SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file Mitigation only Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-52469 SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file No fix yet Fix from $2,3002026-07-21 CRITICAL 9.3 CVE-2026-47708 MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the `log_file_name` parameter in the `stata_do` A… Patch available Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-30631 An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code vi… Patch available Fix from $2,3002026-07-21 CRITICAL 9.9 CVE-2026-64879 A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell … Security Center after 6.8.0 Fix from $2,3002026-07-21 CRITICAL 9.9 CVE-2026-64878 Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a… Security Center after 6.8.0 Fix from $2,3002026-07-21 CRITICAL 9.8 CVE-2026-59147 Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find. The attach… No fix yet Fix from $2,3002026-07-21