Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

415849 source statements · aliases may refer to the same vulnerability

CVE-2026-91502Published

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthe…

cve-program ·

Vendor product: Oracle WebLogic Server

CVSS 3.1 7.3Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91501Published

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker w…

cve-program ·

Vendor product: Oracle Identity Manager

CVSS 3.1 5.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91499Published

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via O…

cve-program ·

Vendor product: Oracle Database Server

CVSS 3.1 8.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91496Published

Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with net…

cve-program ·

Vendor product: Workflow

CVSS 3.1 7.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91494Published

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenti…

cve-program ·

Vendor product: Oracle Identity Manager Connector

CVSS 3.1 7.4Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91493Published

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthentica…

cve-program ·

Vendor product: Oracle Identity Manager Connector

CVSS 3.1 7.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91492Published

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticate…

cve-program ·

Vendor product: Oracle Identity Manager Connector

CVSS 3.1 8.7Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91489Published

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileg…

cve-program ·

Vendor product: Oracle Identity Manager Connector

CVSS 3.1 7.1Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91488Published

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileg…

cve-program ·

Vendor product: Oracle Identity Manager Connector

CVSS 3.1 7.1Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91487Published

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Ent…

cve-program ·

Vendor product: Oracle Java SE

CVSS 3.1 4.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91486Published

Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker …

cve-program ·

Vendor product: PeopleSoft Enterprise FIN General Ledger Brazil

CVSS 3.1 4.4Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91485Published

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows high privileged attacker wi…

cve-program ·

Vendor product: PeopleSoft Enterprise FIN Cash Management

CVSS 3.1 3.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91484Published

Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure wh…

cve-program ·

Vendor product: Oracle Java SE

CVSS 3.1 7.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91483Published

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with log…

cve-program ·

Vendor product: Oracle Outside In Technology

CVSS 3.1 7.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91482Published

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacke…

cve-program ·

Vendor product: PeopleSoft Enterprise SCM Strategic Sourcing

CVSS 3.1 6.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91481Published

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with…

cve-program ·

Vendor product: PeopleSoft Enterprise SCM Purchasing

CVSS 3.1 5.4Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91480Published

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker…

cve-program ·

Vendor product: PeopleSoft Enterprise SCM Strategic Sourcing

CVSS 3.1 6.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91479Published

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment att…

cve-program ·

Vendor product: Oracle Database Server

CVSS 3.1 6.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91477Published

Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network acces…

cve-program ·

Vendor product: Oracle JavaFX

CVSS 3.1 3.1Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91476Published

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker w…

cve-program ·

Vendor product: PeopleSoft Enterprise FIN Common Objects Brazil

CVSS 3.1 5.3Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91475Published

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows low privileged attac…

cve-program ·

Vendor product: Oracle Outside In Technology

CVSS 3.1 6.6Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91474Published

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker w…

cve-program ·

Vendor product: PeopleSoft Enterprise FIN Common Objects Brazil

CVSS 3.1 6.1Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91473Published

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…

cve-program ·

Vendor product: Oracle HTTP Server

CVSS 3.1 7.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91471Published

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated att…

cve-program ·

Vendor product: PeopleSoft Enterprise CC Common Application Objects

CVSS 3.1 3.7Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91467Published

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access …

cve-program ·

Vendor product: Oracle Fusion Middleware Control

CVSS 3.1 6.6Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91466Published

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management). The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged att…

cve-program ·

Vendor product: PeopleSoft Enterprise FIN Common Objects Argentina

CVSS 3.1 6.4Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91465Published

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker…

cve-program ·

Vendor product: PeopleSoft Enterprise FIN Common Objects Argentina

CVSS 3.1 7.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-94422Published

xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

cve-program ·

https://github.com/flatpak/xdg-dbus-proxy: xdg-dbus-proxy · https://bodhi.fedoraproject.org/updates/?packages=xdg-dbus-proxy: xdg-dbus-proxy · https://access.redhat.com/downloads/content/package-browser/: xdg-dbus-proxy

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91464Published

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…

cve-program ·

Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition

CVSS 3.1 5.3Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91463Published

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…

cve-program ·

Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition

CVSS 3.1 5.3Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91462Published

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…

cve-program ·

Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition

CVSS 3.1 5.9Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91461Published

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 2…

cve-program ·

Vendor product: Oracle Java SE · Vendor product: Oracle GraalVM for JDK · Vendor product: Oracle GraalVM Enterprise Edition

CVSS 3.1 3.7Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91460Published

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attac…

cve-program ·

Vendor product: Oracle Outside In Technology

CVSS 3.1 7.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91459Published

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attac…

cve-program ·

Vendor product: Oracle Outside In Technology

CVSS 3.1 7.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91458Published

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with log…

cve-program ·

Vendor product: Oracle Outside In Technology

CVSS 3.1 7.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91457Published

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attac…

cve-program ·

Vendor product: Oracle Outside In Technology

CVSS 3.1 7.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91455Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated a…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 5.4Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91450Published

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network…

cve-program ·

Vendor product: Siebel CRM Deployment

CVSS 3.1 7.4Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91449Published

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network…

cve-program ·

Vendor product: Siebel CRM Deployment

CVSS 3.1 7.4Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91448Published

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network a…

cve-program ·

Vendor product: Siebel CRM Deployment

CVSS 3.1 7.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-91447Published

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network a…

cve-program ·

Vendor product: Siebel CRM Deployment

CVSS 3.1 7.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-115929Published

MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

cve-program ·

Vendor product: Compass

CVSS 4.0 7.6 · CVSS 3.1 6.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-114406Published

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: ca-certificates · https://access.redhat.com/downloads/content/package-browser/: ca-certificates · https://access.redhat.com/downloads/content/package-browser/: ca-certificates

CVSS 3.1 6.8Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-110734Published

Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the ima…

cve-program ·

Vendor product: Godot Engine

CVSS 3.1 2.5Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-113378Published

mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection

cve-program ·

Vendor product: mcp-ripgrep

CVSS 4.0 4.8 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 4.3Source modified 24 Oct 2026Recorded 24 Oct 2026

CVE-2026-115931Published

Arbitrary file read and backend crash through unrestricted provider method calls

cve-program ·

Vendor product: postiz-app

CVSS 3.1 9.9Source modified 23 Oct 2026Recorded 24 Oct 2026

CVE-2026-113877Published

HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions

cve-program ·

https://cpan.org/modules: HTTP-Headers-ActionPack

Source modified 23 Oct 2026Recorded 24 Oct 2026

CVE-2026-102208Published

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-83862Published

Windows Network Load Balancing Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows Server 2012

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-97781Published

Microsoft Office OneNote Remote Code Execution Vulnerability

cve-program ·

Vendor product: Microsoft 365 Apps for Enterprise

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved NuGet dependencies or open a Microsoft CVE for fixing KBs, releases and planning.