CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Web Runtime Security) version 9.2.26.3. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in JD Edwards EnterpriseOne HCM Foundation (version 9.2) in Time Accounting and HRM Base component. Difficult to exploit, low-privileged attacker via HTTP can take over the system.
Vulnerability in JD Edwards EnterpriseOne Procurement and Subcontract Management (Procurement component) version 9.2. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle PeopleSoft Enterprise CS Campus Community (component: Security). Affected version is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized access to critical data or full access to all accessible data, as well as unauthorized update, insert or delete access to some data.
PeopleSoft Enterprise CS Campus Community (part of Oracle PeopleSoft) version 9.2.38 has a difficult-to-exploit vulnerability that can be used by a low-privileged attacker via HTTP. Successful attack can result in unauthorized access, data modification, and complete denial of service (hang or frequent crashes).
In PeopleSoft Enterprise CS Student Records version 9.2.38, a vulnerability in the Higher Ed Statistics Agency - UK HESA component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Vulnerability in PeopleSoft Enterprise CS Campus Community (version 9.2.38) in Security component. Difficult to exploit, low-privileged attacker via HTTP can take over the system.
Vulnerability in PeopleSoft Enterprise CS Student Records (Australian Features component) version 9.2.38. Low-privileged attacker via HTTP can take over the system.
Vulnerability in PeopleSoft Enterprise CS Student Financials (Billing component) version 9.2.38. Low-privileged attacker via HTTP can take over the system.
Vulnerability in PeopleSoft Enterprise FIN Project Costing (component: Projects) allows an unauthenticated attacker with local access, after user interaction, to take over the system. Version 9.2 is affected.
Vulnerability in PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). Affects version 9.2.38. A low-privileged attacker with network access via HTTPS can compromise data confidentiality and integrity.
Vulnerability in PeopleSoft Enterprise CS Student Records (version 9.2.38) in Research Tracking component. Difficult to exploit, low-privileged attacker via HTTP can take over the system.
Vulnerability in PeopleSoft Enterprise FIN Cash Management. Difficult to exploit, unauthenticated attacker via HTTP can compromise data confidentiality and integrity, affecting other products.
Vulnerability in PeopleSoft Enterprise CS Campus Community (Integration and Interfaces component) version 9.2.38. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle PeopleSoft Enterprise FIN Staffing Front Office (component: Staffing Front Office). Affected version is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized creation, deletion or modification of critical data or all accessible data.
Vulnerability in MySQL Connectors (component: Connector/J) versions 9.7.0-9.7.1. Easily exploitable, requires low-privileged attacker with network access via multiple protocols. Successful attack can lead to unauthorized access to critical data and impact other products.
Vulnerability in Oracle Transportation Management (component: CSV Management). Affected version is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized access to critical data, modification, and partial denial of service.
Vulnerability in Oracle Transportation Management (Install component) version 6.5.3. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle Enterprise Command Center Framework (Core component) version V16. A low-privileged attacker with network access via HTTP can gain unauthorized read access to some data, modify or delete critical data, and cause a complete denial of service (DoS).
Vulnerability in Oracle Enterprise Command Center Framework (Core component) allows an unauthenticated attacker with physical network access to take over the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS