Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87374 | medium | 6.8 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-11-03 |
| CVE-2026-87373 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-11-03 |
| CVE-2026-109268 | high | 7.5 | No | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with... | 2026-11-03 |
| CVE-2026-108693 | high | 7.8 | No | ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches... | 2026-11-03 |
| CVE-2026-87371 | medium | 6.8 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-11-03 |
| CVE-2026-105081 | medium | 4.4 | No | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security p... | 2026-11-03 |
| CVE-2026-116886 | medium | 5.4 | No | Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to i... | 2026-11-03 |
| CVE-2026-109258 | high | 7.5 | No | ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an... | 2026-11-03 |
| CVE-2026-83401 | medium | 6.1 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-11-03 |
| CVE-2026-83402 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-11-03 |
| CVE-2026-83403 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-11-03 |
| CVE-2026-91259 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-11-03 |
| CVE-2026-91407 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are... | 2026-11-03 |
| CVE-2026-91408 | critical | 9.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that... | 2026-11-03 |
| CVE-2026-91501 | medium | 5.5 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affecte... | 2026-11-03 |
| CVE-2026-109259 | medium | 5.3 | No | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory c... | 2026-11-03 |
| CVE-2026-121562 | medium | 5.3 | No | CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team cus... | 2026-11-03 |
| CVE-2026-121558 | medium | 4.3 | No | AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authe... | 2026-11-03 |
| CVE-2026-121546 | medium | 5.9 | No | ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape the topDirec... | 2026-11-03 |
| CVE-2026-121451 | high | 8.8 | No | AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that al... | 2026-11-03 |