CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component Asset Management) version 9.1. A high-privileged attacker with network access via HTTP can, with user interaction, create, delete, or modify critical data, gain full access to it, and cause a partial denial of service.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component JGSS). A difficult-to-exploit unauthenticated attacker with network access can, with user interaction, gain unauthorized access to critical data. Applies to clients running sandboxed Java Web Start applications or applets.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component JGSS). A difficult-to-exploit unauthenticated attacker with network access can, with user interaction, gain unauthorized access to critical data. Applies to clients running sandboxed Java Web Start applications or applets.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component JGSS). A difficult-to-exploit unauthenticated attacker with network access can perform unauthorized creation, deletion, or modification of critical data. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - UNIX) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via HTTP can, with user interaction, perform unauthorized updates, inserts, or deletes and gain unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component Lightweight HTTP Server). An unauthenticated attacker with network access can perform unauthorized updates, inserts, or deletes. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component Networking). An unauthenticated attacker with network access can perform unauthorized updates, inserts, or deletes. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle Java SE (component: Networking). An unauthenticated attacker with network access can exploit it by supplying data to APIs in the component, resulting in unauthorized update, insert or delete access to some Oracle Java SE accessible data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all Siebel CRM Deployment accessible data.
Vulnerability in Oracle Siebel Apps - Customer Order Management (component: Order Management). A low-privileged attacker with network access via HTTP, requiring user interaction, can cause unauthorized update, insert or delete access, unauthorized read access to a subset of data, and partial denial of service.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert or delete access and unauthorized read access to a subset of data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.
Vulnerability in Oracle Siebel CRM End User (component: Open UI). An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert or delete access and unauthorized read access to a subset of data.
Vulnerability in the Siebel CRM End User product (Open UI component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or all accessible data.
Vulnerability in the Siebel Apps - Financial Services product (Financial Accounts component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.
Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS