Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86929 | high | 8.8 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2,... | 2026-10-28 |
| CVE-2026-116874 | medium | 6.1 | No | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to i... | 2026-10-28 |
| CVE-2013-20007 | high | 7.2 | No | Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by in... | 2026-10-28 |
| CVE-2026-87389 | low | 3.7 | No | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supp... | 2026-10-28 |
| CVE-2026-87388 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). The supported... | 2026-10-28 |
| CVE-2026-87387 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Management). The supported ve... | 2026-10-28 |
| CVE-2026-87386 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version... | 2026-10-28 |
| CVE-2026-87385 | medium | 4.8 | No | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supp... | 2026-10-28 |
| CVE-2026-87384 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supp... | 2026-10-28 |
| CVE-2026-87382 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operational Sourcing). The suppo... | 2026-10-28 |
| CVE-2026-87380 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order Entry). The supported v... | 2026-10-28 |
| CVE-2026-87372 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-114091 | medium | 5.3 | No | Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the lookup to the calle... | 2026-10-28 |
| CVE-2026-87367 | low | 3.7 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).... | 2026-10-28 |
| CVE-2026-87366 | medium | 4.9 | No | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that ar... | 2026-10-28 |
| CVE-2026-113776 | high | 7.8 | No | virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_templat... | 2026-10-28 |
| CVE-2026-113738 | medium | 6.3 | No | A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability... | 2026-10-28 |
| CVE-2026-113707 | medium | 5.4 | No | A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the... | 2026-10-28 |
| CVE-2026-113672 | critical | 9.9 | No | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-se... | 2026-10-28 |
| CVE-2026-112945 | not reported | — | No | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, applications using custom middleware ar... | 2026-10-28 |