CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 06:30 UTC)

What this means for you

This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product oracle:outside_in_technology. Show all products

16 CVEs, showing 1 to 16

CVE	Severity	Title	Published
CVE-2026-60414	High 7.8	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Assigned by oracle	Aug 18, 2026
CVE-2026-60413	High 7.8	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Assigned by oracle	Aug 18, 2026
CVE-2026-60412	High 7.8	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Assigned by oracle	Aug 18, 2026
CVE-2026-60392	High 7.8	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). Assigned by oracle	Aug 18, 2026
CVE-2021-40690	High 7.5	Bypass of the secureValidation property Assigned by apache	Sep 19, 2021
CVE-2021-20227	Medium 5.5	A flaw was found in SQLite's SELECT query functionality (src/select.c). Assigned by redhat	Mar 23, 2021
CVE-2020-15358	Medium 5.5	In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. Assigned by mitre	Jun 27, 2020
CVE-2020-13630	High 7.0	ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. Assigned by mitre	May 27, 2020
CVE-2020-13631	Medium 5.5	SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. Assigned by mitre	May 27, 2020
CVE-2020-13632	Medium 5.5	ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. Assigned by mitre	May 27, 2020
CVE-2020-13434	Medium 5.5	SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. Assigned by mitre	May 24, 2020
CVE-2020-11655	High 7.5	SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled. Assigned by mitre	Apr 9, 2020
CVE-2020-11656	Critical 9.8	In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. Assigned by mitre	Apr 9, 2020
CVE-2020-9327	High 7.5	In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations. Assigned by mitre	Feb 21, 2020
CVE-2019-16168	Medium 6.5	In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the… Assigned by mitre	Sep 9, 2019
CVE-2018-20843	High 7.5	In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enoug… Assigned by mitre	Jun 24, 2019

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.