Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.7Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).EPSS 0.3%Apr 21, 2026
- Medium5.3Vulnerability in the XML Database component of Oracle Database Server.EPSS 0.2%Apr 21, 2026
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).EPSS 0.3%Apr 21, 2026
- High8.5Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core).EPSS 0.2%Apr 21, 2026
- Medium6.3A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext.EPSS 0.1%Apr 9, 2026
- High7.5Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.EPSS 2.9%Apr 9, 2026
- Medium6.9Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t…EPSS 0.2%Mar 30, 2026
- Medium5.9Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.EPSS 0.4%Mar 27, 2026
- Critical9.8Oracle identity_manager Missing Authentication for Critical FunctionKEVEPSS 1.0%Mar 20, 2026
- Critical9.8Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop).EPSS 0.5%Mar 17, 2026
- Medium5.5A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.EPSS 0.2%Mar 16, 2026
- Unknownlinux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-Mar 16, 2026
- Unknownlinux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilitiesFeb 17, 2026
- UnknownOracle iplanet_web_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVFeb 11, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityKEVEPSS 73.2%Jan 20, 2026
- UnknownDouble Public Key Signing Function Oracle Attack on Ed25519Nov 14, 2025
- Critical9.8Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityKEVEPSS 88.6%Oct 21, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 95.9%Oct 11, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityKEVEPSS 99.7%Oct 4, 2025
- UnknownOracle Retail Xstore Office Pre-Authentication Path TraversalKEVJun 8, 2025
- UnknownOracle GlassFish Server, JDeveloper, and WebLogic Server Components Remote Confidentiality VulnerabilityKEVJun 7, 2025
- UnknownOracle Fusion Middleware Exposure of Sensitive Information to an Unauthorized ActorKEVJun 7, 2025
- UnknownOracle WebLogic Server Missing Authentication for Critical FunctionKEVFeb 13, 2025
- Medium6.7In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled o…EPSS 0.2%Dec 24, 2024
- UnknownOracle Coherence Product of Oracle Fusion Middleware Core Components IIOP/T3 VulnerabilityKEVNov 20, 2024