Vulnerabilities
Summary — last 7 days
New vulnerabilities4,993▲ 135 vs. last week
Critical / high2,112▼ 668 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)824▲ 761 vs. last week
More filters
868 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Critical (10) | 1.4% | — | Adobe Campaign | 8/3/2026 | 8/28/2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does… | |
| Analyzed | Critical (9.6) | 0.94% | — | Adobe Campaign | 8/3/2026 | 8/28/2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code.… | |
| Analyzed | Critical (9.8) | 0.86% | — | Adobe Campaign | 7/30/2026 | 8/28/2026 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed. | |
| Analyzed | High (8.6) | 0.56% | — | Adobe Campaign | 7/30/2026 | 8/28/2026 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require… | |
| Deferred | High (8.5) | 0.36% | — | Rtcamp RtmediaAI | 7/27/2026 | 7/27/2026 | Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | |
| Deferred | Critical (9.3) | 0.40% | — | Rtcamp RtmediaAI | 7/27/2026 | 7/27/2026 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | |
| Analyzed | Medium (5.9) | 0.27% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the… | |
| Analyzed | Medium (6.5) | 0.27% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analyzed | Medium (6.5) | 0.28% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analyzed | High (8.2) | 0.35% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analyzed | High (7.1) | 0.28% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Person Data). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analyzed | Medium (6.6) | 0.40% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student… | |
| Analyzed | Medium (5.3) | 0.34% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analyzed | Medium (5.9) | 0.35% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analyzed | Medium (6.5) | 0.39% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Communication). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Campus… | |
| Analyzed | High (7.5) | 0.41% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed Statistics Agency - UK HESA). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft… | |
| Analyzed | High (7.5) | 0.33% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community.… | |
| Analyzed | High (8.8) | 0.43% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Australian Features). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student… | |
| Analyzed | High (8.1) | 0.36% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Student… | |
| Analyzed | High (7.5) | 0.33% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student… | |
| Analyzed | High (8.8) | 0.43% | — | Oracle Peoplesoft Enterprise Campus Software Campus Community | 7/21/2026 | 7/31/2026 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS… | |
| Deferred | Medium (6.5) | 0.38% | — | Rtcamp RtmediaAI | 7/10/2026 | 7/10/2026 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the order_by parameter in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes… | |
| Deferred | High (8.5) | 0.36% | — | Thememove UnicampAI | 7/2/2026 | 10/6/2026 | Subscriber SQL Injection in Unicamp <= 2.2.2 versions. | |
| Analyzed | Critical (10) | 1.2% | — | Adobe Campaign | 6/30/2026 | 8/28/2026 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed. | |
| Deferred | High (7.5) | 0.42% | — | Johnson & Johnson Campus RecruitingAI | 6/26/2026 | 6/26/2026 | Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers. |