Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51698
Total
4098
Critical
15338
High
14987
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-60153 | HIGH | 7.2 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily … | Jul 21, 2026 |
| CVE-2026-60152 | MEDIUM | 5.4 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability … | Jul 21, 2026 |
| CVE-2026-60150 | HIGH | 7.8 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low … | Jul 21, 2026 |
| CVE-2026-60149 | MEDIUM | 5.2 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability … | Jul 21, 2026 |
| CVE-2026-60147 | MEDIUM | 6.5 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are … | Jul 21, 2026 |
| CVE-2026-60146 | MEDIUM | 6.1 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable … | Jul 21, 2026 |
| CVE-2026-60145 | MEDIUM | 4.9 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL … | Jul 21, 2026 |
| CVE-2026-60144 | LOW | 3.6 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability … | Jul 21, 2026 |
| CVE-2026-60143 | HIGH | 7.3 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows … | Jul 21, 2026 |
| CVE-2026-56816 | HIGH | 7.5 | Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's `Http3FrameCodec` buffers incoming data for HTTP/3 reserved frame … | Jul 21, 2026 |
| CVE-2026-56746 | MEDIUM | 6.5 | Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulnerable to security … | Jul 21, 2026 |
| CVE-2026-56745 | UNKNOWN | — | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the `SpdyHttpDecoder` handler … | Jul 21, 2026 |
| CVE-2026-55851 | UNKNOWN | — | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to (but not including) 4.2.16.Final, and 4.1.0.Final up … | Jul 21, 2026 |
| CVE-2026-47731 | CRITICAL | 9.1 | The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data … | Jul 21, 2026 |
| CVE-2026-47709 | UNKNOWN | — | libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a malformed … | Jul 21, 2026 |
| CVE-2026-47254 | MEDIUM | 6.1 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sample_timing_table()` in `libheif/sequences/track.cc` stores an out-of-bounds chunk index (`m_chunks.size()`) into … | Jul 21, 2026 |
| CVE-2026-47251 | UNKNOWN | — | libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) introduced an integer overflow in the … | Jul 21, 2026 |
| CVE-2026-47247 | HIGH | 7.5 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory … | Jul 21, 2026 |
| CVE-2026-47178 | MEDIUM | 6.1 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file (uncompressed `unci` codec, tiled, component-interleaved, … | Jul 21, 2026 |
| CVE-2026-47064 | MEDIUM | 6.5 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL … | Jul 21, 2026 |
| CVE-2026-47063 | HIGH | 7.5 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … | Jul 21, 2026 |
| CVE-2026-47062 | MEDIUM | 5.5 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low … | Jul 21, 2026 |
| CVE-2026-47061 | MEDIUM | 5.6 | Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated … | Jul 21, 2026 |
| CVE-2026-47060 | MEDIUM | 6.5 | Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker … | Jul 21, 2026 |
| CVE-2026-47059 | LOW | 3.7 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are … | Jul 21, 2026 |