CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Package Build SEC component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon access to the infrastructure can take over the application.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access, requiring user interaction, can take over the application.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via SMTP can modify some data and cause a partial denial of service.
Vulnerability in Oracle VM VirtualBox (Core component) affecting version 7.2.16. A low-privileged attacker with logon access can cause a hang or repeatable crash (complete DoS), potentially impacting other products (scope change).
Vulnerability in Oracle VM VirtualBox (Core component) affecting version 7.2.16. A low-privileged attacker with logon access, requiring user interaction, can cause a hang or repeatable crash (complete DoS), potentially impacting other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can modify and read some data, potentially impacting other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in the product.
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
Vulnerability in Oracle HRMS (India) (Indian Payroll component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with local logon can gain unauthorized access to critical data or all data accessible in the product, and attacks may impact additional products (scope change).
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (Security component) in the listed versions. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE (RMI component) affecting versions 8u503 and 8u503-perf, and Oracle GraalVM Enterprise Edition 21.3.19.1.1. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data; attacks may impact additional products (scope change).
Vulnerability in Oracle Java SE (Networking component) affecting versions 21.0.12.1, 25.0.4.1 and 27. An unauthenticated attacker with network access can gain unauthorized read access to a subset of data accessible in the product.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (JAXP component) in the listed versions. A difficult-to-exploit unauthenticated network attack can lead to unauthorized access to critical data or all data accessible in the product.
Vulnerability in PeopleSoft Enterprise PeopleTools (Multichannel Framework component) affecting versions 8.61-8.63. A high-privileged attacker with network access via HTTP can take over the product.
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
Vulnerability in Oracle Identity Manager (OIM Legacy UI component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can, with user interaction, perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data; attacks may impact additional products (scope change).
Vulnerability in the JAXP component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS). The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability in the Networking component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can perform unauthorized data modification and cause a partial denial of service. The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS