Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud).Check if you run itEPSS 0.16%Jan 20, 2026
- High8.1Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Security Management System).Check if you run itEPSS 0.31%Jan 20, 2026
- Medium5.3Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface).Check if you run itEPSS 0.26%Jan 20, 2026
- Medium5.4Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).Check if you run itEPSS 0.19%Jan 20, 2026
- Critical9.8Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal).Check if you run itEPSS 0.49%Jan 20, 2026
- Medium6.5Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils).Check if you run itEPSS 0.38%Jan 20, 2026
- High7.5Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.25%Jan 20, 2026
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.31%Jan 20, 2026
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.31%Jan 20, 2026
- Low3.1Vulnerability in Oracle Java SE (component: JavaFX).Check if you run itEPSS 0.25%Jan 20, 2026
- High7.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).Check if you run itEPSS 0.99%Jan 20, 2026
- High7.0Vulnerability in the SQLcl component of Oracle Database Server.Check if you run itEPSS 0.20%Jan 20, 2026
- Medium5.8Vulnerability in the Oracle Solaris product of Oracle Systems (component: Driver).Check if you run itEPSS 0.21%Jan 20, 2026
- Medium6.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).Check if you run itEPSS 0.30%Jan 20, 2026
- High7.4Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).Check if you run itEPSS 0.53%Jan 20, 2026
- Medium5.3Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Check if you run itEPSS 0.33%Jan 20, 2026
- Medium5.8Vulnerability in the Oracle Solaris product of Oracle Systems (component: Driver).Check if you run itEPSS 0.21%Jan 20, 2026
- Medium4.8Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).Check if you run itEPSS 0.25%Jan 20, 2026
- Medium6.0When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages.Check if you run itEPSS 0.48%Jan 20, 2026
- Medium5.9The poplib module, when passed a user-controlled command, can have additional commands injected using newlines.Check if you run itEPSS 0.38%Jan 20, 2026
- Medium5.9The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines.Check if you run itEPSS 0.43%Jan 20, 2026
- Medium6.0User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.Check if you run itEPSS 0.54%Jan 20, 2026
- Medium5.9User-controlled header names and values containing newlines can allow injecting HTTP headers.Check if you run itEPSS 0.55%Jan 20, 2026
- Medium5.7When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved.Check if you run itEPSS 0.62%Jan 20, 2026
- High7.1HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the script of Revive Adserver.Check if you run itEPSS 0.27%Jan 20, 2026
Sort