Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext.Apr 9, 2026
- High7.5Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.Apr 9, 2026
- Medium6.9Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t…EPSS 0.2%Mar 30, 2026
- Medium5.9Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.Mar 27, 2026
- Critical9.8Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion…EPSS 1.0%Mar 20, 2026
- Critical9.8Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop).EPSS 0.5%Mar 17, 2026
- Medium5.5A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.EPSS 0.2%Mar 16, 2026
- Unknownlinux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-Mar 16, 2026
- Unknownlinux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilitiesFeb 17, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityKEVEPSS 73.2%Jan 20, 2026
- UnknownDouble Public Key Signing Function Oracle Attack on Ed25519Nov 14, 2025
- Critical9.8Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityKEVEPSS 88.6%Oct 21, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 95.9%Oct 11, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityKEVEPSS 99.7%Oct 4, 2025
- Medium6.7In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled o…EPSS 0.2%Dec 24, 2024
- High7.5Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityKEVEPSS 1.7%Nov 18, 2024
- High7.5Oracle WebLogic Server Unspecified VulnerabilityKEVEPSS 74.2%Jul 16, 2024
- High8.8Oracle Agile Product Lifecycle Management (PLM) Deserialization VulnerabilityKEVEPSS 3.9%Feb 16, 2024
- High7.5Oracle WebLogic Server Unspecified VulnerabilityKEVEPSS 99.9%Jan 17, 2023
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityKEVEPSS 98.3%Oct 18, 2022
- Critical9.8Oracle ADF Faces Deserialization of Untrusted Data VulnerabilityKEVEPSS 62.5%Apr 19, 2022
- Critical9.8Oracle Fusion Middleware Unspecified VulnerabilityKEVEPSS 96.3%Jan 19, 2022
- Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityKEVEPSS 99.2%Nov 2, 2020
- High7.2Oracle WebLogic Server Unspecified VulnerabilityKEVEPSS 97.7%Oct 21, 2020
- Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityKEVEPSS 100.0%Oct 21, 2020