Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Chrome | CVE-2026-113016 Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) |
8,8 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-113020 Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-113007 Incorrect calculation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) |
9,6 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-113009 UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) |
8,8 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-112995 Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) |
8,8 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-112992 Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
9,6 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-112994 UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) |
8,8 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Product Workbench | CVE-2026-101808 Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Product Workbench.… |
9,1 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Workflow | CVE-2026-101809 Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Workflow. While the… |
10,0 | 0,57 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Application Object Library | CVE-2026-101767 Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application… |
9,8 | 0,61 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Communications BRM - Elastic Charging Engine | CVE-2026-101763 Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated… |
9,8 | 0,53 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Communications Billing and Revenue Management | CVE-2026-101765 Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with… |
9,1 | 0,44 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Mobile Field Service | CVE-2026-101634 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile… |
9,1 | 0,56 % | Brak wpisu w KEV nie wyklucza ataków | |
| Helidon | CVE-2026-101590 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful… |
9,1 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Solaris | CVE-2026-101537 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability… |
9,8 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Enterprise Manager for Oracle Database | CVE-2026-101528 Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… |
9,9 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Enterprise Manager for Oracle Database | CVE-2026-101529 Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… |
9,9 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle APEX | CVE-2026-101521 Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle APEX. Successful attacks of this… |
9,8 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle WebCenter Sites | CVE-2026-101499 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle… |
9,8 | 0,57 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Trusted Answer Search | CVE-2026-101501 Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in… |
9,9 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Trusted Answer Search | CVE-2026-101503 Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Trusted Answer Search. While the vulnerability is in… |
9,9 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Secure Backup | CVE-2026-101484 Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this… |
9,8 | 0,54 % | Brak wpisu w KEV nie wyklucza ataków | |
| Siebel CRM Cloud Applications | CVE-2026-101446 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud… |
9,9 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| PeopleSoft Enterprise PeopleTools | CVE-2026-101420 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.… |
9,6 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Totolink | CVE-2026-9827 A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this… |
9,1 | 0,63 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.