Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87156 | high | 7.1 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-87163 | high | 8.8 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-87166 | high | 8.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-87167 | high | 8.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-87168 | high | 8.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-25294 | high | 7.4 | No | Transient DOS while parsing frame during channel usage. | 2026-09-22 |
| CVE-2026-25290 | high | 7.8 | No | Memory Corruption when validating large data buffers from external sources using addition to check buffer length. | 2026-09-22 |
| CVE-2026-25284 | high | 7.3 | No | Information Disclosure when a pointer is reused after being deallocated. | 2026-09-22 |
| CVE-2026-25283 | high | 8.8 | No | Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. | 2026-09-22 |
| CVE-2026-25282 | high | 7.9 | No | Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. | 2026-09-22 |
| CVE-2026-25281 | high | 7.4 | No | Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. | 2026-09-22 |
| CVE-2026-25280 | high | 7.8 | No | Memory corruption when processing escape handling flow with insufficient user buffer sizes. | 2026-09-22 |
| CVE-2026-87265 | high | 8.1 | No | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-81642 | critical | 9.8 | No | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possi... | 2026-09-22 |
| CVE-2026-87184 | critical | 9.8 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-64195 | high | 7.3 | No | There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation req... | 2026-09-22 |
| CVE-2026-64196 | high | 7.3 | No | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end... | 2026-09-22 |
| CVE-2026-64197 | high | 7.3 | No | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end... | 2026-09-22 |
| CVE-2026-64198 | high | 7.3 | No | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes... | 2026-09-22 |
| CVE-2026-64199 | high | 7.3 | No | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the... | 2026-09-22 |