CVE-2026-92806Published
phpList before 3.6.17 Cross-Site Request Forgery via massremove.php
cve-program ·
Vendor product: phpList
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699309 source statements · aliases may refer to the same vulnerabilityCVE-2026-92813Published
Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass
cve-program ·
Vendor product: Metabase
CVE-2026-91101Published
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
cve-program ·
Vendor product: HP Linux Imaging and Printing Software (HPLIP)
CVE-2026-91100Published
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
cve-program ·
Vendor product: HP Linux Imaging and Printing Software (HPLIP)
CVE-2026-91103Published
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
cve-program ·
Vendor product: HP Linux Imaging and Printing Software (HPLIP)
CVE-2026-91099Published
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
cve-program ·
Vendor product: HP Linux Imaging and Printing Software (HPLIP)
CVE-2026-91097Published
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
cve-program ·
Vendor product: HP Linux Imaging and Printing Software (HPLIP)
CVE-2026-76426Published
Cisco ISE REST API SQL Injection Vulnerability
cve-program ·
Vendor product: Cisco Identity Services Engine Software · Vendor product: Cisco ISE Passive Identity Connector
CVE-2026-76438Published
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
cve-program ·
Vendor product: Cisco BroadWorks
CVE-2026-76449Published
Cisco Identity Services Engine SQL Injection Vulnerability
cve-program ·
Vendor product: Cisco Identity Services Engine Software · Vendor product: Cisco ISE Passive Identity Connector
CVE-2026-20342Published
Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Management Center (FMC)
CVE-2026-76425Published
Cisco ISE SQL Injection Vulnerability
cve-program ·
Vendor product: Cisco Identity Services Engine Software
CVE-2026-20295Published
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20135Published
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-81872Published
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
cve-program ·
Vendor product: opentelemetry-go
CVE-2026-92576Published
HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool
cve-program ·
Vendor product: nanobot
CVE-2026-92586Published
AVideo through 29.0 Missing Authorization via comment API endpoint
cve-program ·
Vendor product: AVideo
CVE-2026-92591Published
Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installer
cve-program ·
Vendor product: cms
CVE-2026-92596Published
Nodemailer before 9.1.0 Denial of Service via addressparser
cve-program ·
Vendor product: nodemailer
CVE-2026-61591Published
djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)
cve-program ·
Vendor product: djust
CVE-2026-61599Published
djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
cve-program ·
Vendor product: djust
CVE-2026-83112Published
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows high privileged …
cve-program ·
Vendor product: Oracle Lease and Finance Management
CVE-2026-83114Published
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Quality
CVE-2026-83117Published
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network acce…
cve-program ·
Vendor product: Applications DBA
CVE-2026-83119Published
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with …
cve-program ·
Vendor product: Oracle User Management
CVE-2026-83120Published
Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ac…
cve-program ·
Vendor product: Oracle Alert
CVE-2026-83121Published
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access vi…
cve-program ·
Vendor product: Oracle Marketing
CVE-2026-83148Published
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP…
cve-program ·
Vendor product: Oracle Application Testing Suite
CVE-2026-83150Published
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing Su…
cve-program ·
Vendor product: Oracle Application Testing Suite
CVE-2026-83168Published
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged…
cve-program ·
Vendor product: Oracle Applications Manager
CVE-2026-83169Published
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attac…
cve-program ·
Vendor product: Oracle One-to-One Fulfillment
CVE-2026-83170Published
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with acc…
cve-program ·
Vendor product: Oracle One-to-One Fulfillment
CVE-2026-83176Published
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged…
cve-program ·
Vendor product: Oracle Common Applications
CVE-2026-83189Published
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wit…
cve-program ·
Vendor product: Oracle User Management
CVE-2026-83191Published
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network…
cve-program ·
Vendor product: Siebel CRM Deployment
CVE-2026-83192Published
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP…
cve-program ·
Vendor product: Siebel CRM End User
CVE-2026-83194Published
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with ne…
cve-program ·
Vendor product: Oracle Depot Repair
CVE-2026-83195Published
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network a…
cve-program ·
Vendor product: Siebel CRM Deployment
CVE-2026-83196Published
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network a…
cve-program ·
Vendor product: Siebel CRM Deployment
CVE-2026-83212Published
Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network a…
cve-program ·
Vendor product: Siebel Apps - Self Service
CVE-2026-83241Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentic…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83245Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentic…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83246Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentic…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83247Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticat…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83253Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerabil…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83254Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentic…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83255Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentic…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83256Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentic…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83257Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privile…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
CVE-2026-83258Published
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentic…
cve-program ·
Vendor product: Oracle Commerce Guided Search / Oracle Commerce Experience Manager
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.