CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 09:40 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101790 | OC Oracle Communications BRM - Elastic Charging Engine Oracle Corporation | 3.3 | Oct 20 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security) |
| CVE-2026-101779 | MC MySQL Cluster Oracle Corporation | 2.7 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry) |
| CVE-2026-101740 | OA Oracle Agile Engineering Data Management Oracle Corporation | 3.6 | Oct 20 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface) |
| CVE-2026-101738 | OA Oracle Agile Engineering Data Management Oracle Corporation | 3.1 | Oct 20 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface) |
| CVE-2026-101600 | OT Oracle TimesTen In-Memory Database Oracle Corporation | 3.6 | Oct 20 | Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB) |
| CVE-2026-101577 | HE Helidon Oracle Corporation | 3.1 | Oct 20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors) |
| CVE-2026-101576 | HE Helidon Oracle Corporation | 3.7 | Oct 20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA) |
| CVE-2026-101570 | HE Helidon Oracle Corporation | 3.7 | Oct 20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2) |
| CVE-2026-101513 | MC MySQL Cluster Oracle Corporation | 3.8 | Oct 20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB) |
| CVE-2026-101449 | SC Siebel CRM Deployment Oracle Corporation | 2.4 | Oct 20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console) |
| CVE-2026-101445 | SC Siebel CRM Cloud Applications Oracle Corporation | 3.6 | Oct 20 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager) |
| CVE-2026-101442 | SC Siebel CRM Cloud Applications Oracle Corporation | 3.1 | Oct 20 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager) |
| CVE-2026-101425 | PE PeopleSoft Enterprise PeopleTools Oracle Corporation | 2.5 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR) |
| CVE-2026-101417 | PE PeopleSoft Enterprise PeopleTools Oracle Corporation | 3.7 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo) |
| CVE-2026-101415 | PE PeopleSoft Enterprise PeopleTools Oracle Corporation | 3.1 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server) |
| CVE-2026-101414 | PE PeopleSoft Enterprise PeopleTools Oracle Corporation | 2.9 | Oct 20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting) |
| CVE-2026-101406 | SA Siebel Apps - Marketing Oracle Corporation | 3.7 | Oct 20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing) |
| CVE-2026-101404 | SA Siebel Apps - Marketing Oracle Corporation | 3.9 | Oct 20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing) |
| CVE-2026-101402 | SA Siebel Apps - Marketing Oracle Corporation | 3.7 | Oct 20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing) |
| CVE-2026-101401 | SA Siebel Apps - Marketing Oracle Corporation | 2.9 | Oct 20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing) |
| CVE-2026-101400 | SA Siebel Apps - Marketing Oracle Corporation | 2.9 | Oct 20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing) |
| CVE-2026-101397 | SA Siebel Apps - Marketing Oracle Corporation | 2.2 | Oct 20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing) |
| CVE-2026-101377 | OR Oracle REST Data Services Oracle Corporation | 2.7 | Oct 20 | Vulnerability in Oracle REST Data Services (component: Database Actions) |
| CVE-2026-101373 | OR Oracle REST Data Services Oracle Corporation | 2.4 | Oct 20 | Vulnerability in Oracle REST Data Services (component: Core) |
| CVE-2026-101372 | OR Oracle REST Data Services Oracle Corporation | 3.7 | Oct 20 | Vulnerability in Oracle REST Data Services (component: Core) |
| CVE-2026-101371 | OR Oracle REST Data Services Oracle Corporation | 3.1 | Oct 20 | Vulnerability in Oracle REST Data Services (component: Core) |
| CVE-2026-101370 | OR Oracle REST Data Services Oracle Corporation | 3.1 | Oct 20 | Vulnerability in Oracle REST Data Services (component: Core) |
| CVE-2026-113715 | VI virtualenv pypa | 2.0 | Oct 20 | virtualenv: Venv configuration readback can reinterpret path boundaries |
| CVE-2026-113717 | VI virtualenv pypa | 2.3 | Oct 20 | virtualenv: Pip seeding with download omits wheel digest verification |
| CVE-2026-113714 | VI virtualenv pypa | 2.3 | Oct 20 | virtualenv: Downloaded wheel selection and caching precede verification |
| CVE-2026-113665 | AP apostrophe apostrophecms | 3.7 | Oct 20 | ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints |
| CVE-2026-113657 | AP apostrophe apostrophecms | 3.7 | Oct 20 | ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS) |
| CVE-2026-113651 | AP apostrophe apostrophecms | 3.3 | Oct 20 | ApostropheCMS: Path traversal in uploadfs |
| CVE-2026-113648 | IM import-export @apostrophecms | 3.1 | Oct 20 | ApostropheCMS: Missing Authentication in `cleanExport` Route |
| CVE-2026-113609 | BA Bandizip Bandisoft | 3.3 | Oct 20 | Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts |
| CVE-2026-113596 | WE webstudio webstudio-is | 3.1 | Oct 20 | Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds |
| CVE-2026-90799 | AC Apache CouchDB Apache Software Foundation | 1.3 | Oct 20 | Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values |
| CVE-2026-90798 | AC Apache CouchDB Apache Software Foundation | 0.6 | Oct 20 | Apache CouchDB: Replicator follows redirects indefinitely |
| CVE-2026-112945 | VI vite vitejs | 2.1 | Oct 20 | Vite: Cross origin script execution through Vite custom middleware |
| CVE-2026-112941 | FI filelock tox-dev | 3.3 | Oct 20 | filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock |
| CVE-2026-112912 | FI filelock tox-dev | 2.5 | Oct 20 | filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker |
| CVE-2026-113357 | E2 @e2e-dev/github tester-army | 3.5 | Oct 20 | @e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Marker |
| CVE-2026-110725 | FA fast-uri fast-uri | 3.7 | Oct 20 | fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references |
| CVE-2026-110095 | FA fast-uri fast-uri | 3.7 | Oct 20 | fast-uri vulnerable to improper path equivalence in relative reference normalization |
| CVE-2026-86933 | MA macOS Apple | 3.3 | Oct 20 | A permissions issue was addressed with additional sandbox restrictions |
| CVE-2026-86874 | XC Xcode Apple | 3.3 | Oct 20 | An out-of-bounds read was addressed with improved input validation |
| CVE-2026-84547 | MA macOS Apple | 3.5 | Oct 20 | A memory corruption issue was addressed with improved input validation |
| CVE-2026-84490 | IA iOS and iPadOS Apple | 2.0 | Oct 20 | This issue was addressed through improved state management |
| CVE-2026-111766 | MA markdown-it markdown-it | 3.7 | Oct 19 | markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled |
| CVE-2026-112769 | PA parse-server parse-community | 2.3 | Oct 19 | Parse Server before 8.6.98 and 9.x before 9.10.3-alpha.1 Session Class-Level Permission Bypass |