High-severity CVEs (page 10)
Page 10 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-101557 | High | 8.8 | 2026-10-20 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12… |
CVE-2026-101556 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101555 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101554 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101552 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields). Supported versions that are affected are 12… |
CVE-2026-101551 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are af… |
CVE-2026-101549 | High | 7.8 | 2026-10-20 | Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerabili… |
CVE-2026-101548 | High | 7.0 | 2026-10-20 | Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerabi… |
CVE-2026-101546 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af… |
CVE-2026-101545 | High | 7.0 | 2026-10-20 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are… |
CVE-2026-101544 | High | 7.0 | 2026-10-20 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101543 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101542 | High | 8.8 | 2026-10-20 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101541 | High | 7.7 | 2026-10-20 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101540 | High | 7.7 | 2026-10-20 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101536 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are 12.2.3-… |
CVE-2026-101535 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Supported versions that are affected are 12.2.3-12… |
CVE-2026-101534 | High | 8.5 | 2026-10-20 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily e… |
CVE-2026-101532 | High | 7.2 | 2026-10-20 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are… |
CVE-2026-101531 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are af… |
CVE-2026-101527 | High | 7.8 | 2026-10-20 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions… |
CVE-2026-101526 | High | 8.8 | 2026-10-20 | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that… |
CVE-2026-101525 | High | 8.8 | 2026-10-20 | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that… |
CVE-2026-101520 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer). Supported ve… |
CVE-2026-101519 | High | 7.2 | 2026-10-20 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are… |
CVE-2026-101518 | High | 8.8 | 2026-10-20 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are aff… |
CVE-2026-101508 | High | 7.5 | 2026-10-20 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Easily exploita… |
CVE-2026-101506 | High | 7.7 | 2026-10-20 | Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerab… |
CVE-2026-101505 | High | 8.7 | 2026-10-20 | Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerab… |
CVE-2026-101504 | High | 7.6 | 2026-10-20 | Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerab… |
CVE-2026-101498 | High | 8.1 | 2026-10-20 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability… |
CVE-2026-101495 | High | 8.8 | 2026-10-20 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-2… |
CVE-2026-101494 | High | 7.7 | 2026-10-20 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows… |
CVE-2026-101482 | High | 7.8 | 2026-10-20 | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily… |
CVE-2026-101481 | High | 8.8 | 2026-10-20 | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily… |
CVE-2026-101479 | High | 8.6 | 2026-10-20 | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitabl… |
CVE-2026-101478 | High | 7.8 | 2026-10-20 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable v… |
CVE-2026-101477 | High | 7.8 | 2026-10-20 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable v… |
CVE-2026-101473 | High | 8.1 | 2026-10-20 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The suppor… |
CVE-2026-101469 | High | 7.5 | 2026-10-20 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affect… |
CVE-2026-101468 | High | 7.5 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily… |
CVE-2026-101467 | High | 7.4 | 2026-10-20 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions that are affected are 17.0-26.9. Diffi… |
CVE-2026-101466 | High | 7.2 | 2026-10-20 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are… |
CVE-2026-101464 | High | 7.1 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9… |
CVE-2026-101463 | High | 7.5 | 2026-10-20 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 17.0-26.9. Easily exp… |
CVE-2026-101461 | High | 7.5 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9… |
CVE-2026-101460 | High | 7.5 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9… |
CVE-2026-101459 | High | 8.3 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9… |
CVE-2026-101458 | High | 8.2 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9… |
CVE-2026-101457 | High | 8.8 | 2026-10-20 | Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.9. Eas… |
CVE-2026-101452 | High | 7.8 | 2026-10-20 | Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay). Supported versions that are affected are 26.3-26.8. Easily exp… |
CVE-2026-101451 | High | 8.7 | 2026-10-20 | Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily exploit… |
CVE-2026-101450 | High | 7.1 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are… |
CVE-2026-101447 | High | 7.1 | 2026-10-20 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 25.12-26.9. Difficult… |
CVE-2026-101438 | High | 8.0 | 2026-10-20 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22… |
CVE-2026-101434 | High | 7.6 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server). Supported versions that are affected are 8.6… |
CVE-2026-101431 | High | 8.7 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61… |
CVE-2026-101429 | High | 7.0 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Diff… |
CVE-2026-101428 | High | 7.5 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Diff… |
CVE-2026-101427 | High | 8.1 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are… |
CVE-2026-101422 | High | 8.1 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are… |
CVE-2026-101421 | High | 7.5 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easi… |
CVE-2026-101416 | High | 7.5 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin). Supported versions that are affected are 8.61-8.63… |
CVE-2026-101411 | High | 8.1 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are… |
CVE-2026-101410 | High | 7.5 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are… |
CVE-2026-101409 | High | 7.5 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are… |
CVE-2026-101398 | High | 7.6 | 2026-10-20 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-101390 | High | 8.1 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are… |
CVE-2026-101388 | High | 7.1 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. E… |
CVE-2026-101387 | High | 7.6 | 2026-10-20 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-112407 | High | 8.8 | 2026-10-20 | Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with… |
CVE-2026-111758 | High | 7.5 | 2026-10-20 | markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never… |
CVE-2026-103672 | High | 7.1 | 2026-10-20 | The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c i… |
CVE-2016-20104 | High | 7.5 | 2026-10-20 | EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary fi… |
CVE-2016-20103 | High | 7.5 | 2026-10-20 | Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'fil… |
CVE-2016-20101 | High | 8.1 | 2026-10-20 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local file… |
CVE-2016-20100 | High | 7.5 | 2026-10-20 | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary fil… |
CVE-2015-20128 | High | 8.2 | 2026-10-20 | FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId param… |
CVE-2015-20125 | High | 7.5 | 2026-10-20 | Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the… |
CVE-2015-20124 | High | 7.5 | 2026-10-20 | Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary… |
CVE-2015-20123 | High | 7.5 | 2026-10-20 | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files b… |
CVE-2014-125134 | High | 7.5 | 2026-10-20 | ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the… |
CVE-2014-125133 | High | 7.5 | 2026-10-20 | NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through… |
CVE-2012-20002 | High | 7.5 | 2026-10-20 | TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary fil… |
CVE-2026-113725 | High | 7.8 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of… |
CVE-2026-113722 | High | 7.8 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted in… |
CVE-2026-113810 | High | 7.0 | 2026-10-20 | A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting ce… |
CVE-2026-113808 | High | 7.1 | 2026-10-20 | A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting us… |
CVE-2026-111767 | High | 8.6 | 2026-10-20 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimenta… |
CVE-2026-100134 | High | 8.8 | 2026-10-20 | Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… |
CVE-2026-113711 | High | 7.5 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke… |
CVE-2026-113666 | High | 7.1 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with view-draft access… |
CVE-2026-28328 | High | 8.8 | 2026-10-20 | SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify informa… |
CVE-2026-113658 | High | 7.5 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV conversion route writes a multipart uploa… |
CVE-2026-113682 | High | 7.4 | 2026-10-20 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in… |
CVE-2026-113679 | High | 7.0 | 2026-10-20 | HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string import has… |
CVE-2026-113613 | High | 8.1 | 2026-10-20 | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malic… |
CVE-2026-113606 | High | 7.1 | 2026-10-20 | Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing… |
CVE-2026-113605 | High | 7.2 | 2026-10-20 | Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows administrators to bypass H2 import r… |
CVE-2026-112836 | High | 8.8 | 2026-10-20 | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Forgery.This issue affects VikRentCar: from n/a thr… |