Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91275 | medium | 6.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-11-02 |
| CVE-2026-91278 | medium | 5.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-11-02 |
| CVE-2026-91279 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-11-02 |
| CVE-2026-91280 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-11-02 |
| CVE-2026-20728 | medium | 6.7 | No | Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may a... | 2026-11-02 |
| CVE-2026-91281 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-11-02 |
| CVE-2026-91282 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). Supported versions that are affect... | 2026-11-02 |
| CVE-2026-13321 | high | 8.6 | No | The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affect... | 2026-11-02 |
| CVE-2026-13204 | high | 7.5 | No | If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these type... | 2026-11-02 |
| CVE-2026-10723 | medium | 6.8 | No | BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This i... | 2026-11-02 |
| CVE-2026-10822 | medium | 6.5 | No | If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit... | 2026-11-02 |
| CVE-2026-11331 | high | 7.5 | No | An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAME... | 2026-11-02 |
| CVE-2026-11605 | high | 7.5 | No | The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, ev... | 2026-11-02 |
| CVE-2026-11622 | high | 7.5 | No | A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The... | 2026-11-02 |
| CVE-2026-11721 | high | 7.5 | No | It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRS... | 2026-11-02 |
| CVE-2026-93753 | high | — | No | Rejected reason: This CVE ID has been rejected because it does not describe a security vulnerability. | 2026-11-02 |
| CVE-2026-80069 | medium | 5.4 | No | MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, includ... | 2026-11-02 |
| CVE-2026-2613 | high | 8.7 | No | The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statemen... | 2026-11-02 |
| CVE-2026-51863 | critical | 9.1 | No | DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:12... | 2026-11-02 |
| CVE-2026-55981 | critical | 9.6 | No | A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upl... | 2026-11-02 |