CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, requiring user interaction. Allows unauthorized modification, full data access, and partial denial of service. CVSS score 9.6.
Vulnerability in Service Delivery Platform (Messaging Enabler component) versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by low-privileged attacker with network access via Oracle Net, allowing unauthorized modification and full data access. CVSS score 9.6.
Vulnerability in Oracle Hyperion Calculation Manager (Security component) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) versions 8.61-8.63. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle Payments (File Transmission component) versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Siebel Apps - Marketing (Marketing component) versions 17.0-26.6. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing full data access and complete denial of service (hang or frequent crashes). CVSS score 9.1.
Vulnerability in Oracle Web Services Manager (component: Web Services Security) allows an unauthenticated attacker via HTTP to gain unauthorized access, modification, or deletion of data. The attack can result in full compromise of accessible data. CVSS score 9.1.
Vulnerability in Oracle WebCenter Portal (component: Composer) allows a low-privileged attacker via HTTP to take over the portal. The attack may impact other products (scope change). CVSS score 9.9.
Vulnerability in Oracle WebCenter Portal (component: Portlet Services) allows an unauthenticated attacker via HTTP to gain unauthorized data access and cause hangs or frequent crashes (DoS). CVSS score 9.1.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) allows an unauthenticated attacker via HTTP to completely take over the system. CVSS score 9.8.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) allows an unauthenticated attacker via HTTP to completely take over the system. CVSS score 9.8.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) allows a low-privileged attacker via HTTP to completely take over the system. The attack may impact other products (scope change). CVSS score 9.9.
Vulnerability in Oracle WebLogic Server (component: Core) allows a low-privileged attacker via T3 or IIOP to completely take over the server. The attack may impact other products (scope change). CVSS score 9.9.
Vulnerability in Oracle WebLogic Server (component: Core) allows an unauthenticated attacker via IIOP to completely take over the server. CVSS score 9.8.
Vulnerability in Oracle WebLogic Server (component: Core) allows an unauthenticated attacker via T3 or IIOP to completely take over the server. CVSS score 9.8.
Vulnerability in Oracle WebLogic Server (component: Core) allows an unauthenticated attacker via T3 or IIOP to completely take over the server. CVSS score 9.8.
Vulnerability in Oracle Hospitality Simphony (POS component) allows an unauthenticated attacker via HTTP to compromise the system, leading to unauthorized data modification and complete denial of service. CVSS score is 9.1.
A flaw in TRENDnet TV-IP751WIC (version 11.03.03) affects functions SystemNetworkChanged, SystemDDNSChanged, SystemEmailChanged, SystemFTPChanged, websCheckRealm, FUN_00432574, and FUN_0043372C in the alphapd component. Manipulation leads to stack-based buffer overflow, exploitable remotely.
FUXA version 1.3.2 and earlier has a vulnerability in the allowDashboard authorization gate that allows a remote unauthenticated attacker to obtain a signed guest token and access the Node-RED editor and flow deployment API. The attacker can deploy malicious nodes or execute scripts, gaining control over project data, configuration, and potentially the operating system.
ZEBRA, a Zcash node written in Rust, before version 4.5.0 can accept a block that zcashd rejects due to undercounting the P2SH signature-operation counter for scripts containing a disabled opcode. An attacker can exploit this to cause a chain split, affecting network integrity and availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS