Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 802 of 1013.
- CVE-2026-22027 CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion
- CVE-2026-22026 CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion
- CVE-2026-22025 CryptoLib Memory Leak on HTTP Error Response in KMC Client
- CVE-2026-22024 CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion
- CVE-2026-22023 CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern
- CVE-2026-22022 Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
- CVE-2026-22021 Denial of service in Oracle GraalVM Enterprise Edition
- CVE-2026-2202 Tenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflow
- CVE-2026-22019 Missing authorization in PeopleSoft Enterprise HCM Shared Components
- CVE-2026-22018 Denial of service in Oracle GraalVM Enterprise Edition
- CVE-2026-22017 Denial of service in MySQL Server
- CVE-2026-22016 XML external entity in Oracle GraalVM Enterprise Edition
- CVE-2026-22015 Information disclosure in MySQL Server
- CVE-2026-22014 Missing authorization in Oracle User Management
- CVE-2026-22013 Security feature bypass in Oracle GraalVM Enterprise Edition
- CVE-2026-22011 Missing authorization in Oracle Applications DBA
- CVE-2026-22010 Missing authorization in Oracle Financial Services Analytical Applications Infrastructure
- CVE-2026-2201 ZeroWdd studentmanager LeaveController.java addLeave cross site scripting
- CVE-2026-22009 Denial of service in MySQL Server
- CVE-2026-22008 Security feature bypass in Oracle Java SE
- CVE-2026-22007 Information disclosure in Oracle GraalVM Enterprise Edition
- CVE-2026-22006 Information disclosure in PeopleSoft Enterprise HCM Human Resources
- CVE-2026-22005 Denial of service in MySQL Server
- CVE-2026-22004 Denial of service in MySQL Server
- CVE-2026-22003 Denial of service in Oracle GraalVM Enterprise Edition
- CVE-2026-22002 Denial of service in MySQL Server
- CVE-2026-22001 Information disclosure in MySQL Server
- CVE-2026-2200 heyewei JFinalCMS API Endpoint save cross site scripting
- CVE-2026-21999 Information disclosure in Oracle Database Server
- CVE-2026-21998 Denial of service in MySQL Server
- CVE-2026-21997 Missing authorization in Oracle Life Sciences Empirica Signal
- CVE-2026-21996 Denial of service in Oracle Linux
- CVE-2026-21994 Missing authorization in Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit
- CVE-2026-21992 Auth bypass in Oracle Identity Manager
- CVE-2026-21991 Path traversal in Oracle Linux
- CVE-2026-21990 Other in Oracle VM VirtualBox
- CVE-2026-2199 code-projects Online Reviewer System user-delete.php sql injection
- CVE-2026-21989 Other in Oracle VM VirtualBox
- CVE-2026-21988 Other in Oracle VM VirtualBox
- CVE-2026-21987 Other in Oracle VM VirtualBox
- CVE-2026-21986 Denial of service in Oracle VM VirtualBox
- CVE-2026-21985 Information disclosure in Oracle VM VirtualBox
- CVE-2026-21984 Other in Oracle VM VirtualBox
- CVE-2026-21983 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-21982 Other in Oracle VM VirtualBox
- CVE-2026-21981 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-21980 Other in Oracle Life Sciences Central Coding
- CVE-2026-2198 code-projects Online Reviewer System loaddata.php sql injection
- CVE-2026-21979 Other in Oracle Planning and Budgeting Cloud Service
- CVE-2026-21978 Other in Oracle FLEXCUBE Universal Banking
- CVE-2026-21977 Other in Oracle Zero Data Loss Recovery Appliance Software
- CVE-2026-21976 Other in Oracle Business Intelligence Enterprise Edition
- CVE-2026-21975 Denial of service in Oracle Database Server
- CVE-2026-21974 Information disclosure in Oracle Life Sciences Central Designer
- CVE-2026-21973 Other in Oracle FLEXCUBE Investor Servicing
- CVE-2026-21972 Information disclosure in Oracle Configurator
- CVE-2026-21971 Other in PeopleSoft Enterprise SCM Purchasing
- CVE-2026-21970 Other in Oracle Life Sciences Central Designer
- CVE-2026-2197 code-projects Online Reviewer System exam-delete.php sql injection
- CVE-2026-21969 Other in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-21968 Denial of service in MySQL Server
- CVE-2026-21967 Other in Oracle Hospitality OPERA 5
- CVE-2026-21966 Cross-site scripting in Oracle Hospitality OPERA 5 Property Services
- CVE-2026-21965 Denial of service in MySQL Server
- CVE-2026-21964 Denial of service in MySQL Server
- CVE-2026-21963 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control
- CVE-2026-21961 Missing authorization in PeopleSoft Enterprise HCM Human Resources
- CVE-2026-21960 Missing authorization in Oracle Applications DBA
- CVE-2026-2196 code-projects Online Reviewer System exam-update.php sql injection
- CVE-2026-21959 Missing authorization in Oracle Workflow
- CVE-2026-21957 Privilege escalation in Oracle VM VirtualBox
- CVE-2026-21956 Denial of service in Oracle VM VirtualBox
- CVE-2026-21955 Denial of service in Oracle VM VirtualBox
- CVE-2026-21954 Missing authorization in Oracle Retail Xstore Point of Service
- CVE-2026-21953 Missing authorization in Oracle Retail Xstore Point of Service
- CVE-2026-21952 Denial of service in MySQL Server
- CVE-2026-21951 Cross-site scripting in PeopleSoft Enterprise PeopleTools
- CVE-2026-21950 Denial of service in MySQL Server
- CVE-2026-2195 code-projects Online Reviewer System questions-view.php sql injection
- CVE-2026-21949 Denial of service in MySQL Server
- CVE-2026-21948 Denial of service in MySQL Server
- CVE-2026-21947 Cross-site scripting in Oracle Java SE
- CVE-2026-21946 Cross-site scripting in JD Edwards EnterpriseOne Tools
- CVE-2026-21945 Denial of service in Oracle GraalVM Enterprise Edition
- CVE-2026-21944 Cross-site scripting in Oracle Agile Product Lifecycle Management for Process
- CVE-2026-21943 Cross-site scripting in Oracle Scripting
- CVE-2026-21942 Denial of service in Oracle Solaris
- CVE-2026-21941 Denial of service in MySQL Server
- CVE-2026-21940 Information disclosure in Oracle Agile PLM
- CVE-2026-2194 D-Link DI-7100G C1 start_proxy_client_email command injection
- CVE-2026-21939 Other in Oracle Database Server
- CVE-2026-21938 Cross-site scripting in PeopleSoft Enterprise PeopleTools
- CVE-2026-21937 Denial of service in MySQL Server
- CVE-2026-21936 Denial of service in MySQL Cluster
- CVE-2026-21935 Other in Oracle Solaris
- CVE-2026-21934 Other in PeopleSoft Enterprise PeopleTools
- CVE-2026-21933 Other in Oracle GraalVM Enterprise Edition
- CVE-2026-21932 Other in Oracle GraalVM Enterprise Edition
- CVE-2026-21931 Other in Oracle APEX Sample Applications