CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-101365 | MEDIUM | 4.7 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that a… | — |
|
2026-10-20 |
| CVE-2026-101364 | MEDIUM | 5.4 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that a… | — |
|
2026-10-20 |
| CVE-2026-101363 | MEDIUM | 5.3 | Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affec… | — |
|
2026-10-20 |
| CVE-2026-101362 | MEDIUM | 6.9 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected … | — |
|
2026-10-20 |
| CVE-2026-101361 | MEDIUM | 4.2 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected … | — |
|
2026-10-20 |
| CVE-2026-101360 | MEDIUM | 5.4 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected … | — |
|
2026-10-20 |
| CVE-2026-101359 | MEDIUM | 5.3 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected … | — |
|
2026-10-20 |
| CVE-2026-110322 | MEDIUM | 5.5 | The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointe… |
T1190
T1203
|
|
2026-10-20 |
| CVE-2026-109576 | MEDIUM | 5.5 | The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iteratin… | — |
|
2026-10-20 |
| CVE-2026-105960 | MEDIUM | 5.5 | PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. Th… | — |
|
2026-10-20 |
| CVE-2026-101103 | MEDIUM | 5.5 | The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was lar… | — |
|
2026-10-20 |
| CVE-2016-20102 | MEDIUM | 6.1 | JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthe… | — |
|
2026-10-20 |
| CVE-2014-125132 | MEDIUM | 6.1 | Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerabili… | — |
|
2026-10-20 |
| CVE-2014-125131 | MEDIUM | 6.1 | DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthentica… | — |
|
2026-10-20 |
| CVE-2012-20005 | MEDIUM | 6.1 | SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability… | — |
|
2026-10-20 |
| CVE-2012-20004 | MEDIUM | 6.1 | K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability tha… | — |
|
2026-10-20 |
| CVE-2012-20003 | MEDIUM | 6.1 | Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerabil… | — |
|
2026-10-20 |
| CVE-2026-113869 | MEDIUM | 5.4 | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Pa… | — |
|
2026-10-20 |
| CVE-2026-113868 | MEDIUM | 5.3 | When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the serve… | — |
|
2026-10-20 |
| CVE-2026-113866 | MEDIUM | 5.9 | When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's Aut… | — |
|
2026-10-20 |