CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data, modify it, and cause partial denial of service. User interaction is required.
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to access critical data, modify it, and cause partial denial of service.
Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, under difficult conditions and with user interaction, take over the server via HTTP, affecting other products.
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to fully compromise the system.
Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) allows an unauthenticated attacker with network access via HTTP, requiring user interaction, to take over the system. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in Oracle WebCenter Content (component: Content Server) allows an unauthenticated attacker with network access via HTTP to compromise the system. User interaction is required.
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to fully compromise the system.
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to fully compromise the system.
Vulnerability in Oracle WebCenter Content (component: Content Server) allows an unauthenticated attacker with network access via HTTP to compromise the system. User interaction is required.
Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, with user interaction, take over the server via HTTP.
Vulnerability in Oracle JDeveloper (Data Visualization Tools component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker via HTTP can access and modify data, though exploitation is difficult.
Vulnerability in Oracle Data Integrator (component: Studio) allows a low-privileged attacker with local access to take over the system. Requires logon to the infrastructure where Oracle Data Integrator runs.
Vulnerability in Oracle MySQL Connectors product (component: Connector/J) versions 9.7.0-9.7.1. It is difficult to exploit, requires low privileges and network access. Successful attack can lead to unauthorized creation, deletion or modification of critical data, access to it, and partial denial of service.
In Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0, a vulnerability in the Security Framework component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Vulnerability in JD Edwards EnterpriseOne Tools (component: Web Runtime Security) version 9.2.26.3. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in JD Edwards EnterpriseOne HCM Foundation (version 9.2) in Time Accounting and HRM Base component. Difficult to exploit, low-privileged attacker via HTTP can take over the system.
Vulnerability in JD Edwards EnterpriseOne Procurement and Subcontract Management (Procurement component) version 9.2. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle PeopleSoft Enterprise CS Campus Community (component: Security). Affected version is 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized access to critical data or full access to all accessible data, as well as unauthorized update, insert or delete access to some data.
PeopleSoft Enterprise CS Campus Community (part of Oracle PeopleSoft) version 9.2.38 has a difficult-to-exploit vulnerability that can be used by a low-privileged attacker via HTTP. Successful attack can result in unauthorized access, data modification, and complete denial of service (hang or frequent crashes).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS