Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91465 | high | 7.5 | No | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported... | 2026-10-24 |
| CVE-2026-91464 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).... | 2026-10-24 |
| CVE-2026-91463 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).... | 2026-10-24 |
| CVE-2026-91462 | medium | 5.9 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).... | 2026-10-24 |
| CVE-2026-91461 | low | 3.7 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).... | 2026-10-24 |
| CVE-2026-105014 | critical | 9.1 | No | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to ex... | 2026-10-24 |
| CVE-2026-101813 | high | 8.8 | No | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affec... | 2026-10-24 |
| CVE-2026-101736 | high | 7.4 | No | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affecte... | 2026-10-24 |
| CVE-2026-101692 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-24 |
| CVE-2026-101686 | high | 8.8 | No | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported... | 2026-10-24 |
| CVE-2026-101685 | high | 8.8 | No | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported... | 2026-10-24 |
| CVE-2026-101664 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101656 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101655 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101654 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101653 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-101635 | high | 8.8 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-24 |
| CVE-2026-106110 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer f... | 2026-10-24 |
| CVE-2026-106111 | medium | 5.3 | No | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate r... | 2026-10-24 |
| CVE-2026-106112 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCal... | 2026-10-24 |