CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker to remotely take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
A vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker to remotely take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker to remotely take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker with network access to take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker with network access to compromise the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle, concerning the Performance Monitor component. Versions 8.61 and 8.62 are susceptible to easily exploitable attacks that can lead to system takeover.
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Attacks may also significantly impact additional products.
Vulnerability in the Identity Manager product of Oracle Fusion Middleware allows a low privileged attacker with network access to compromise Identity Manager. Affected versions are 12.2.1.4.0 and 14.1.2.1.0.
Vulnerability in the WebLogic Server product of Oracle affecting versions 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable by a low privileged attacker with network access via HTTP, potentially leading to takeover of the WebLogic Server.
FileBrowser Quantum versions prior to 1.3.2-stable, 1.4.0-beta, and 1.4.1-beta are vulnerable to Path Traversal. The issue occurs in publicPatchHandler, where user-controlled paths can be manipulated, allowing operations on files outside the shared directory.
The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability, an authenticated attacker can send arbitrary commands to the device that are executed with administrative permissions by the underlying operating system.
In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed.
A vulnerability in the Perry library before version 0.5.1166 allows remote attackers to bypass JWT token expiration validation. This is caused by the unconditional setting of validate_exp = false in the verify_decode helper within the standard JWT verification path.
An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token.
Mitigation bypass in the DOM security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
A vulnerability involving a mitigation bypass in the DOM security component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
A vulnerability allowing same-origin policy bypass in the Networking: Cookies component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
A sandbox escape vulnerability exists in the Networking component of Firefox and Thunderbird due to incorrect boundary conditions. This flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
A sandbox escape vulnerability in the Security: Process Sandboxing component. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
A sandbox escape vulnerability exists in the DOM: Navigation component of Firefox and Thunderbird. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.