CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (part of Oracle PeopleSoft) version 9.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly read and modify critical data. CVSS 7.4.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
A vulnerability in Oracle Communications Converged Application Server (RTP Proxy component) version 8.3. Difficult to exploit, requires logon to infrastructure and high privileges. Successful attack can lead to server takeover and impact other products (scope change). CVSS 7.5.
Vulnerability in Oracle Communications Converged Application Server (Core component) versions 8.2 and 8.3. Difficult to exploit, allows an unauthenticated attacker with network access via TCP/IP to take over the server.
Vulnerability in Oracle Communications Converged Application Server version 8.3. Difficult to exploit, allows a high-privileged attacker with network access via TLS to take over the server and impact additional products.
Vulnerability in Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine). A low-privileged attacker via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in PeopleSoft Enterprise SCM Manufacturing (part of Oracle PeopleSoft) version 9.2. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to unauthorizedly read and modify critical data. CVSS 7.4.
Vulnerability in PeopleSoft Enterprise SCM Purchasing (part of Oracle PeopleSoft) version 9.2. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly modify critical data and read a subset of data. CVSS 8.2.
In Oracle Solaris (Utility component), a difficult-to-exploit vulnerability allows a local low-privileged attacker to unauthorizedly create, delete, or modify critical data and access all Solaris data. The vulnerability affects additional products (scope change).
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Installation) version 6.2.4. Difficult to exploit, allows a low-privileged attacker via HTTP to compromise the system.
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment to compromise Oracle Agile Product Lifecycle Management for Process.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management). A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to critical data and the ability to update, insert, or delete it, affecting other products.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) version 6.2.4. Allows a low-privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) version 6.2.4. Allows a low-privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Agile PLM (component: Security) version 9.3.6. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access and modify critical data.
Vulnerability in Oracle Agile PLM product of Oracle Supply Chain, component Security. Affects version 9.3.6. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
Vulnerability in Oracle Agile PLM (Security component) version 9.3.6. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Agile PLM (component: Security) version 9.3.6. Allows a low-privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Agile PLM (component: User and User Group) version 9.3.6. Allows a low-privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Commerce Guided Search Platform Services (component: Forge) version 11.4.0. A low-privileged attacker with network access via HTTP can easily exploit this flaw, causing a hang or frequent crash (DOS) and unauthorized read access to a subset of data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS