Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-104312 | medium | 6.8 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths... | 2026-11-03 |
| CVE-2026-102590 | high | 7.7 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side reque... | 2026-11-03 |
| CVE-2026-101566 | high | 7.8 | No | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions tha... | 2026-11-03 |
| CVE-2026-101492 | medium | 4.7 | No | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected... | 2026-11-03 |
| CVE-2026-101456 | medium | 6.0 | No | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affec... | 2026-11-03 |
| CVE-2026-101455 | medium | 6.3 | No | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are a... | 2026-11-03 |
| CVE-2026-101454 | medium | 6.1 | No | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affec... | 2026-11-03 |
| CVE-2026-101451 | high | 8.7 | No | Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26... | 2026-11-03 |
| CVE-2026-101447 | high | 7.1 | No | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 25.... | 2026-11-03 |
| CVE-2019-25781 | high | 7.5 | No | Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows remote attackers to e... | 2026-11-03 |
| CVE-2026-108060 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108059 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108058 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108057 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108056 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108055 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108054 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108053 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108052 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |
| CVE-2026-108051 | not reported | — | No | A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and en... | 2026-11-03 |