CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server) allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. The attacker can unauthorizedly create, delete, or modify critical data and gain access to data available in Oracle WebCenter Sites.
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. The attacker can gain unauthorized access to critical data and has the ability to update, insert, or delete data.
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Attackers can gain access to critical data and perform unauthorized operations on the data.
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks can lead to unauthorized access to critical data and complete access to all accessible data.
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can cause hangs or frequent crashes of Oracle WebCenter Sites and gain unauthorized access to data.
A vulnerability in the Oracle VM VirtualBox component related to shared folders allows a low privileged attacker to gain unauthorized access to data. It affects versions prior to 5.0.34 and prior to 5.1.16.
A vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Attacks may lead to unauthorized access to data and partial denial of service.
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J) affects versions 5.1.40 and earlier. It allows a low privileged attacker with network access to compromise MySQL Connectors, which may significantly impact additional products.
A vulnerability in the PeopleTools component of Oracle PeopleSoft Products allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data accessible in PeopleSoft Enterprise PeopleTools.
A vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control allows an unauthenticated attacker with network access via HTTPS to compromise the platform. Successful attacks can result in hanging or frequently crashing the platform, leading to a complete denial of service.
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (Kernel Zones virtualized NIC driver). It allows a low privileged attacker with network access to compromise Solaris.
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) allows an attacker with network access to compromise Java SE. It requires user interaction, making exploitation difficult, but can lead to takeover of Java SE.
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) affects versions 7u131 and 8u121. It allows an unauthenticated attacker with network access to compromise Java SE, requiring user interaction.
A vulnerability in the Java SE, Java SE Embedded, and JRockit components allows an unauthenticated attacker with access to the infrastructure where these systems run to compromise them. It requires interaction from a person other than the attacker, making exploitation difficult.
Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware allows unauthenticated attackers with network access via HTTP to compromise Oracle Service Bus. Attackers can gain unauthorized access to data and cause a partial denial of service.
Podatność w komponencie Oracle WebLogic Server w Oracle Fusion Middleware umożliwia nieautoryzowanemu atakującemu z dostępem do sieci przez HTTP kompromitację serwera. Atakujący może nieautoryzowanie tworzyć, usuwać lub modyfikować dostęp do krytycznych danych oraz uzyskać pełny dostęp do wszystkich danych dostępnych w Oracle WebLogic Server.
Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite allows a high privileged attacker with network access via HTTP to compromise Primavera Gateway. Attacks may significantly impact additional products, leading to unauthorized access to critical data.
Vulnerability in the Oracle Social Network component of Oracle Fusion Middleware (Android Client) allows an unauthenticated attacker with network access via HTTPS to compromise Oracle Social Network. Successful attacks can lead to unauthorized access to critical data or complete access to all Oracle Social Network accessible data.
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon) in version 11.3. It allows an unauthenticated attacker with network access to exploit this vulnerability, potentially leading to unauthorized access to data and partial denial of service.
A vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component allows a low privileged attacker with network access via HTTP to compromise the system. Attacks may significantly impact additional products, leading to unauthorized access to critical data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS