v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4

Vulnerability Name

CVE

CWE

Severity

MediaWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-61634)

CVE-2025-61634

CWE-22

Low

Oracle JRE Improper Access Control Vulnerability (CVE-2025-61748)

CVE-2025-61748

CWE-284

Low

Oracle Database Server Improper Access Control Vulnerability (CVE-2025-61749)

CVE-2025-61749

CWE-284

Low

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62184)

CVE-2025-62184

CWE-707

Low

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-67639)

CVE-2025-67639

CWE-352

Low

contao : Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-107848)

CVE-2026-107848

CWE-352

Low

PostgreSQL Untrusted Search Path Vulnerability (CVE-2026-14673)

CVE-2026-14673

CWE-426

Low

PostgreSQL Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-16241)

CVE-2026-16241

CWE-191

Low

Grafana Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-21725)

CVE-2026-21725

CWE-367

Low

Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2026-21727)

CVE-2026-21727

CWE-732

Low

Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-22007)

CVE-2026-22007

CWE-200

Low

Oracle JRE Execution with Unnecessary Privileges Vulnerability (CVE-2026-22008)

CVE-2026-22008

CWE-250

Low

Oracle JRE Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-22018)

CVE-2026-22018

CWE-770

Low

Apache Tomcat CVE-2026-24733 Vulnerability (CVE-2026-24733)

CVE-2026-24733

-

Low

Django Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-25674)

CVE-2026-25674

CWE-362

Low

Grafana Improper Access Control Vulnerability (CVE-2026-28378)

CVE-2026-28378

CWE-284

Low

EspoCRM Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-33659)

CVE-2026-33659

CWE-367

Low

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2026-34094)

CVE-2026-34094

CWE-668

Low

Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34268)

CVE-2026-34268

CWE-200

Low

Oracle Database Server Improper Access Control Vulnerability (CVE-2026-34312)

CVE-2026-34312

CWE-284

Low

OpenSSL Expected Behavior Violation Vulnerability (CVE-2026-35191)

CVE-2026-35191

CWE-440

Low

Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-35193)

CVE-2026-35193

CWE-524

Low

CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-35496)

CVE-2026-35496

CWE-22

Low

Roundcube Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2026-35538)

CVE-2026-35538

CWE-707

Low

axios Improper Encoding or Escaping of Output Vulnerability (CVE-2026-42040)

CVE-2026-42040

CWE-116

Low

OpenSSL Covert Channel Vulnerability (CVE-2026-42768)

CVE-2026-42768

CWE-514

Low

OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-42770)

CVE-2026-42770

CWE-325

Low

Apache Tomcat Observable Timing Discrepancy Vulnerability (CVE-2026-43514)

CVE-2026-43514

CWE-208

Low

Next.js Use of Weak Hash Vulnerability (CVE-2026-44582)

CVE-2026-44582

-

Low

SharePoint Out-of-bounds Read Vulnerability (CVE-2026-45485)

CVE-2026-45485

CWE-125

Low

Caddy Web Server Partial String Comparison Vulnerability (CVE-2026-45692)

CVE-2026-45692

CWE-187

Low

Oracle JRE Improper Access Control Vulnerability (CVE-2026-47010)

CVE-2026-47010

CWE-284

Low

Oracle Database Server Missing Authentication for Critical Function Vulnerability (CVE-2026-47038)

CVE-2026-47038

CWE-306

Low

Oracle JRE Improper Access Control Vulnerability (CVE-2026-47059)

CVE-2026-47059

CWE-284

Low

Django Missing Authorization Vulnerability (CVE-2026-4292)

CVE-2026-4292

CWE-862

Low

Python Improper Input Validation Vulnerability (CVE-2026-4519)

CVE-2026-4519

CWE-20

Low

Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4874)

CVE-2026-4874

CWE-918

Low

OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-54872)

CVE-2026-54872

CWE-208

Low

OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-54875)

CVE-2026-54875

CWE-208

Low

SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55035)

CVE-2026-55035

CWE-125

Low

Drupal Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-55807)

CVE-2026-55807

CWE-918

Low

PostgreSQL Incorrect Ownership Assignment Vulnerability (CVE-2026-6469)

CVE-2026-6469

CWE-708

Low

OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-77696)

CVE-2026-77696

CWE-208

Low

Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-7666)

CVE-2026-7666

CWE-319

Low

Coppermine Cross Site Scripting Vulnerability (CVE-2026-82482)

CVE-2026-82482

-

Low

NextJsReactFramework : Origin Validation Error Vulnerability (CVE-2026-94486)

CVE-2026-94486

CWE-346

Low

Outdated JavaScript libraries

-

CWE-1395

Information

Magento 2.0-2.3 End of life

-

CWE-1104

Information

Oracle JRE CVE-2012-0547 Vulnerability (CVE-2012-0547)

CVE-2012-0547

-

Information

Oracle JRE Other Vulnerability (CVE-2012-5085)

CVE-2012-5085

-

Information