CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Retail Xstore Point of Service component allows unauthenticated attackers with network access via HTTP to compromise the system. Attackers can gain access to critical data and perform unauthorized operations on the data.
Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to hangs or frequent crashes.
A vulnerability in the Oracle Hospitality Simphony component allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to data and cause a partial denial of service.
Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a low privileged attacker to compromise Oracle VM VirtualBox, potentially impacting additional products.
Vulnerability in the Oracle iLearning component (Learner Pages) allows an unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products.
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently crashing Oracle Outside In Technology and unauthorized access to data.
Vulnerability in the Oracle Web Analytics component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Analytics. Attacks require human interaction, which may lead to unauthorized access to critical data.
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, increasing the risk for the organization.
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Flexfields) allows easy exploitation by a low privileged attacker with network access via HTTP. This enables unauthorized creation, deletion, or modification of critical data.
A vulnerability in the Java SE, Java SE Embedded, and JRockit components allows unauthenticated attackers with network access to compromise these systems. Attackers can gain access to critical data or complete access to all data accessible in Java SE, Java SE Embedded, and JRockit.
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle Field Service component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks require human interaction and can lead to unauthorized access to critical data.
Vulnerability in the BI Publisher component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction and can lead to unauthorized access to critical data.
A vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via T3 to compromise the server. Attacks may lead to hanging or frequent crashes of the server, resulting in a complete denial of service (DoS).
Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise allows an unauthenticated attacker with network access via HTTP to compromise the system. Affects versions 8.54 and 8.55, and attacks may lead to unauthorized access to data and partial denial of service.
Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server) allows low privileged attackers with network access to compromise the management console. Attackers can gain unauthorized access to data and cause a partial denial of service.
Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces) allows remote exploitation by an unauthenticated attacker. The attacker can cause hangs or frequent crashes of Oracle Applications Manager.
A vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS