CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to denial of service (complete DOS) and unauthorized access to data.
Vulnerability in the Oracle Hospitality Simphony component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in Oracle Hospitality Simphony.
Vulnerability in the Oracle iStore component of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction and may lead to unauthorized access to critical data.
Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a low privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox.
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) affects versions 7u141 and 8u131. It allows physical access to compromise Java SE, potentially leading to its takeover.
Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products.
Vulnerability in the Java SE, Java SE Embedded, and JRockit components allows an unauthenticated attacker with network access to compromise data. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in Java SE, Java SE Embedded, and JRockit.
Vulnerability in the Java SE, Java SE Embedded, and JRockit components that allows an unauthenticated attacker with network access to compromise these systems. It requires human interaction, making exploitation difficult, but may significantly impact other products.
Vulnerability in the Java SE, Java SE Embedded, and JRockit components allows an unauthenticated attacker with network access to compromise these systems. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in Java SE, Java SE Embedded, and JRockit.
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) affects versions 7u141 and 8u131. It allows an unauthenticated attacker with network access to compromise Java SE, requiring user interaction.
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite, related to CRM User Management, allows an unauthenticated attacker with network access via HTTP to compromise the applications. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
Vulnerability in the Oracle iStore component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iStore. It requires human interaction from a person other than the attacker.
Vulnerability in the Java Advanced Management Console component of Oracle Java SE allows low privileged attackers with network access via HTTP to compromise the console. Attacks may lead to unauthorized access to data and partial denial of service.
A vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control allows a low privileged attacker with network access via HTTP to compromise the platform. Attacks may significantly impact additional products, leading to unauthorized access to critical data.
Vulnerability in the Oracle FLEXCUBE Universal Banking component allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized access to critical data and complete access to all data accessible in Oracle FLEXCUBE Universal Banking.
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) affects version 8u131. It allows easy exploitation by a low privileged attacker, potentially leading to unauthorized access and modification of critical data.
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.
Vulnerability in the Java SE and Java SE Embedded component of Oracle Java SE that allows an unauthenticated attacker with network access to compromise these systems. It requires human interaction, making exploitation difficult.
A vulnerability in the Java SE component of Oracle Java SE allows an unauthenticated attacker with network access to compromise Java SE. Successful attacks require human interaction, making exploitation difficult.
Vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise, affecting versions 8.54 and 8.55, allows easy exploitation by an unauthenticated attacker with network access via HTTP. This can lead to unauthorized access to data and partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS