Skip to content
COOEY
LIVE FEED
3576 events · 4 sources · newest first
Events in view
3576
all sources
Critical
1821
severity
Active sources
4
collectors
Last sync
2026-08-26 12:00
UTC
All data Vulns · 3576Regulatory · 144News · 399 LIVE · UPDATES ON COLLECT
All sources NVD CVE · 1767CISA KEV · 1677CISA advisory · 113DC3 DCISE · 19
Any severity Critical High ⊙ SUBSCRIBE (RSS)
2026-07-21 NVD CVE
CVE-2026-61211: Vulnerability in the RDBMS component of Oracle Database Server. Supported versi CRITICAL
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute...
2026-07-21 NVD CVE
CVE-2026-61244: Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product o CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufacturing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-61204: Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Ora CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (component: Primavera Integration). The supported version that is affected is 9.2. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-61203: Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle People CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated...
2026-07-21 NVD CVE
CVE-2026-61242: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low...
2026-07-21 NVD CVE
CVE-2026-61233: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-61223: Vulnerability in the Oracle Communications Converged Application Server product CRITICAL
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit...
2026-07-21 NVD CVE
CVE-2026-61235: Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland produc CRITICAL
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-61237: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-62549: Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (compon CRITICAL
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged...
2026-07-21 NVD CVE
CVE-2026-61238: Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-61245: Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of O CRITICAL
Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-56820: Netty is a network application framework for development of protocol servers and HIGH
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, `OcspClient` does not validate that the...
2026-07-21 CISA KEV
DD-WRT Stack-Based Buffer Overflow Vulnerability HIGH
DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.
buffer-overflowcisa-kevcode-executioncve-2021-27137cybersecuritydd-wrtinformation-securitynetworks-devices
2026-07-21 NVD CVE
CVE-2026-62546: Vulnerability in the Oracle Applications Framework product of Oracle E-Business CRITICAL
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows high...
2026-07-21 NVD CVE
CVE-2026-61167: Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: CRITICAL
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with...
2026-07-21 NVD CVE
CVE-2026-61153: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily...
2026-07-21 NVD CVE
CVE-2026-61146: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...
2026-07-21 NVD CVE
CVE-2026-56817: Netty is a network application framework for development of protocol servers and CRITICAL
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, any caller that can deliver bytes to a...
2026-07-21 NVD CVE
CVE-2026-60289: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo CRITICAL
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60387: Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa CRITICAL
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-21 NVD CVE
CVE-2026-60531: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion CRITICAL
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...
2026-07-21 NVD CVE
CVE-2026-60999: Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware CRITICAL
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows...
2026-07-21 NVD CVE
CVE-2026-16441: In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previo CRITICAL
In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
2026-07-21 NVD CVE
CVE-2026-61100: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio CRITICAL
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...
2026-07-20 NVD CVE
CVE-2026-64620: FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow CRITICAL
FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function writes the modular-exponentiation result into the caller's output...
authenticationbuffer-overflowcrypto-rsa-commonscve-2026-64620cybersecuritydefense-industrial-basedenialfreerdp
2026-07-20 NVD CVE
CVE-2026-12701: A path traversal vulnerability was found in pulpcore. The relative_path_validato CRITICAL
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../"...
administrator-privilegesartifacts-handlingcybersecuritydata-exposurefile-integrityfile-writefilesystem-exportincident-response
2026-07-20 NVD CVE
CVE-2026-63766: GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability CRITICAL
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands...
arbitrary-command-executionauthenticationcve-2026-63766cybersecuritygpt-sovitgradioinformation-securitynvd-cve
2026-07-20 NVD CVE
CVE-2026-16242: A flaw was found in the Konnectivity proxy-server configuration for hosted contr CRITICAL
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client...
agent-authenticationclient-certificate-validationconfiguration-errorcontrol-plane-trafficdata-droppingdata-modificationdefense-industrial-basekonnectivity
2026-07-20 NVD CVE
CVE-2026-64625: AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync CRITICAL
AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh -c, allowing command substitution via $() and backticks. Attackers can inject arbitrary...
avideocommand-injectioncve-2026-45578cve-2026-64625cybersecuritydefense-industrial-basedfar-252-204-7012escapeshellarg
2026-07-20 NVD CVE
CVE-2026-63767: ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticate CRITICAL
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to...
arbitrary-command-executioncve-2026-63767cybersecuritydefense-industrial-basedfar-252-204-7012ktraansformernist-800-171nvd-cve
2026-07-20 NVD CVE
CVE-2026-28220: Wazuh is a free and open source platform used for threat prevention, detection, HIGH
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API (DAPI) handling allow a cluster peer, or any actor able to...
2026-07-20 NVD CVE
CVE-2026-41521: xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer HIGH
xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send...
2026-07-20 NVD CVE
CVE-2026-12341: This vulnerability impacts all versions of IdentityIQ and allows an unauthentica HIGH
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.
2026-07-18 NVD CVE
CVE-2026-15631: Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail HIGH
Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path against the configured rewrite prefix. The WebSocket routing path in...
2026-07-18 NVD CVE
CVE-2026-16158: Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 b HIGH
Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source path without a delimiter. Different destination and source...
2026-07-17 NVD CVE
CVE-2026-8635: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate pri CRITICAL
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with...
arbitrary-code-executionauthenticate-usercve-2026-8635databases-manipulationibmlangflownvd-cveopen-source-software
2026-07-17 NVD CVE
CVE-2026-62241: clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT CRITICAL
clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the default in .env.example. Because GET /api/v1/scans returns scan...
apiattackauthenticationclawvetcve-2026-62241datum-exfiltrationhard-codedjwt
2026-07-17 NVD CVE
CVE-2026-12693: Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. CRITICAL
Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video...
access-control-listaclauthorization-bypasscve-2026-12693enterprise-video-platformnvd-cvesecurity-bugsoftware-vulnerabilities
2026-07-17 NVD CVE
CVE-2026-15091: IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to CRITICAL
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generation.
arbitrary-script-executioncve-2026-15091ibmibm-engineering-ai-hub-1-0-0ibm-engineering-ai-hub-1-1-0ibm-engineering-ai-hub-1-2-0ibm-engineering-ai-hubsimproper-inputs-neutralization
◀ PREV PAGE 22 / 90 NEXT ▶