CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Sophos Web Appliance Remote / Secure Web Gateway server version 4.2.1.3 is vulnerable to remote command injection in its administrative interface. These vulnerabilities occur in MgrDiagnosticTools.php, where user input is improperly processed, allowing malicious commands to be executed.
The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative interface. These vulnerabilities occur in the MgrReport.php component responsible for blocking and unblocking IP addresses.
An error in the lha_read_file_header_1() function in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access, potentially causing a crash via a specially crafted archive.
Palo Alto Networks Terminal Services Agent before version 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation.
Palo Alto Networks Terminal Services Agent before version 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors.
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications. It requires interaction from a third party, which may lead to unauthorized access to critical data.
A vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a third party, increasing the risk for the organization.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a third party, increasing the risk of an attack.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. It requires user interaction, which increases the risk of an attack.
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.