Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83012 | high | 7.7 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-83013 | high | 8.8 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-90882 | not reported | — | No | The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credent... | 2026-09-22 |
| CVE-2026-77875 | not reported | — | No | The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundar... | 2026-09-22 |
| CVE-2026-83022 | high | 7.9 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-83023 | high | 8.6 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are af... | 2026-09-22 |
| CVE-2026-83024 | high | 7.8 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are af... | 2026-09-22 |
| CVE-2026-83025 | high | 8.7 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are af... | 2026-09-22 |
| CVE-2026-89420 | not reported | — | No | Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources w... | 2026-09-22 |
| CVE-2026-87119 | not reported | — | No | Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation credential to charge th... | 2026-09-22 |
| CVE-2026-63279 | not reported | — | No | LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a co... | 2026-09-22 |
| CVE-2026-63278 | not reported | — | No | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated... | 2026-09-22 |
| CVE-2026-63276 | not reported | — | No | LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embe... | 2026-09-22 |
| CVE-2026-63275 | not reported | — | No | LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The n... | 2026-09-22 |
| CVE-2026-63274 | not reported | — | No | LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken... | 2026-09-22 |
| CVE-2026-63273 | not reported | — | No | LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption... | 2026-09-22 |
| CVE-2026-63272 | not reported | — | No | LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that ca... | 2026-09-22 |
| CVE-2026-89422 | not reported | — | No | Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to imperso... | 2026-09-22 |
| CVE-2026-82672 | not reported | — | No | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint mint allows a malicious HTTP/1... | 2026-09-22 |
| CVE-2026-83026 | high | 8.3 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are af... | 2026-09-22 |