CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.
Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can, under difficult conditions, cause unauthorized creation, deletion, or modification of critical data.
Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction and potentially impacting additional products.
Vulnerability in Oracle REST Data Services (Backend-as-a-Service component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction.
Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access to data accessible through the service.
Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible through the service.
A vulnerability in Oracle REST Data Services (Database Actions component) affects versions 24.2.0-26.1.0. A high-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations, gain unauthorized read access to a subset of data, and cause a partial denial of service.
A vulnerability in Oracle REST Data Services (Database Actions component) affects versions 24.2.0-26.1.0. A low-privileged attacker with HTTP network access, requiring user interaction, can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data, potentially impacting additional products.
A vulnerability in Oracle REST Data Services (Graph QL component) affects versions 24.2.0-26.1.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of data accessible through Oracle REST Data Services.
A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A difficult-to-exploit vulnerability allows an unauthenticated attacker with HTTP network access, requiring user interaction, to create, delete or modify critical data and read a subset of data, potentially impacting additional products.
A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A difficult-to-exploit vulnerability allows a low-privileged attacker with HTTP network access to perform unauthorized update, insert or delete operations and read a subset of data.
A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. A low-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations and gain unauthorized read access to a subset of data.
A vulnerability in Oracle REST Data Services (Core component) affects versions 24.2.0-26.1.0. An unauthenticated attacker with HTTP network access can perform unauthorized update, insert or delete operations on data accessible through Oracle REST Data Services.
A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file.
A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected or returned object pointer before dereferencing fixed fields during post-processing.
The parser in the PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.
The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record. This may lead to an out-of-bounds write.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS