CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox, and may impact additional products (scope change).
Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure. Allows a high-privileged attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox, and may impact additional products (scope change).
Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. A low-privileged attacker with local access can exploit this, potentially leading to takeover of Oracle VM VirtualBox.
Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Easily exploitable, requires logon to the infrastructure and user interaction. Allows an unauthenticated attacker to cause a hang or frequent crashes (complete DoS) of VirtualBox and unauthorized modification of some data.
Vulnerability in Oracle Access Manager (Authorization Engine) affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can cause a partial denial of service via network (TCP).
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read and modify access to some data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can exploit this, potentially leading to takeover of the system.
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP can modify data and cause partial denial of service.
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can cause a complete denial of service (hang or frequent crashes).
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, under difficult conditions, can gain unauthorized read and modify access to some data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can exploit this, potentially leading to takeover of the system.
Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. A high-privileged attacker with local access can exploit this, potentially leading to takeover of Oracle VM VirtualBox.
Vulnerability in Oracle VM VirtualBox (Core) in version 7.2.14. A high-privileged attacker with local access can access critical data, and the attack may impact other products (scope change).
Vulnerability in Oracle VM VirtualBox (Core) in version 7.2.14. A high-privileged attacker with local access can access critical data, and the attack may impact other products (scope change).
Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. An unauthenticated attacker with network access via RDP can exploit this, potentially causing hangs or frequent crashes (complete DoS) of Oracle VM VirtualBox.
Vulnerability in Oracle's PeopleSoft Enterprise FIN Common Objects (component: Security). Affects version 9.2. Difficult to exploit, allows unauthenticated attacker via HTTP to take over the system. CVSS 8.1.
Vulnerability in Oracle Identity Manager (component: Installer). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows low-privileged attacker with local access to take over the system. CVSS 7.8.
Vulnerability in Oracle Fusion Middleware Helidon (Imperative Web Server) versions 1.0.0-1.4.18, 3.0.0-3.2.17, and 4.0.0-4.4.1. A low-privileged attacker via HTTPS can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS