CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Project Manufacturing (component: PJM Command Center) version V16. Difficult to exploit, requires low privileges and network access via HTTP. Successful attack may lead to unauthorized read access to a subset of data.
Vulnerability in Oracle Project Manufacturing (PJM Command Center component) version V16. Difficult to exploit, requires local access and low privileges. Successful attack may allow unauthorized data modification and partial denial of service.
A vulnerability in Oracle Data Integrator (component: Patchset Assistant) versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with local access can gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.3 (Confidentiality).
A vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high privileged attacker with network access to cause a partial denial of service. Exploitation is difficult.
Vulnerability in Oracle Java SE (component: JavaFX) version 8u491. Difficult to exploit, requires user interaction and network access. Successful attack may lead to unauthorized read access to a subset of data.
Oracle Java SE version 8u491 has a vulnerability in the JavaFX component. This difficult-to-exploit flaw allows an unauthenticated attacker with network access to perform unauthorized read access to a subset of data, requiring user interaction.
Vulnerability in Oracle VM VirtualBox 7.2.12 allows a high-privileged attacker with local access to read a subset of data. The attack also impacts additional products.
In Oracle Workflow (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Workflow Notification Mailer component. Difficult to exploit, allows a low-privileged attacker with local access to unauthorized update/insert/delete and partial denial of service. CVSS 3.6.
Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: 2D) in multiple versions have a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access to cause a partial denial of service (partial DOS). This vulnerability primarily affects clients running Java Web Start applets.
A vulnerability in Oracle VM VirtualBox version 7.2.12. Easily exploitable by an attacker with high privileges and local access. May lead to unauthorized data modification in VirtualBox, and attacks may impact additional products (scope change).
Vulnerability in Oracle VM VirtualBox 7.2.12 allows a high-privileged attacker to read a subset of accessible data. The attack requires local access but may affect other products.
Vulnerability in RDBMS component of Oracle Database Server versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2. Easily exploitable by high-privileged attacker with network access via Oracle Net. Successful attack may lead to unauthorized data modification.
A vulnerability in Oracle Java SE 8u491, component JavaFX, allows an unauthenticated attacker with network access to compromise data integrity via unauthorized update, insert, or delete access. The attack requires user interaction and is difficult to exploit. It applies to sandboxed Java deployments like applets or Web Start.
Vulnerability in Oracle Java SE in the JavaFX component. Version 8u491 is affected. The attack is difficult to exploit, requires user interaction and network access. It may lead to unauthorized data modification.
Vulnerability in Siebel CRM End User (component: Redwood UI) versions 24.4-26.3. Difficult to exploit, requires high privileges, user interaction, and network access via HTTP. Successful attack may cause partial denial of service and impact other products.
Vulnerability in Oracle Java SE in the JavaFX component. Version 8u491 is affected. The attack is difficult to exploit, requires user interaction and network access. It may lead to unauthorized data modification.
A vulnerability in GoldenGate Stream Analytics (component: Security) version 26.1.0.0.0. A low privileged attacker with local access can cause a partial denial of service (partial DOS). CVSS 3.1 Base Score 3.3 (Availability).
Vulnerability in Siebel CRM Integration (versions 17.0-26.4) requires physical access and is difficult to exploit. It allows unauthorized read access to a subset of data, also impacting other products.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). Supported versions that are affected are 17.0-26.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 2.6 (Confidentiality impacts).
A vulnerability in the ImageIO component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows an unauthenticated attacker with network access to compromise data integrity, resulting in unauthorized update, insert, or delete access.