CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI) allows an unauthenticated attacker with network access via HTTP to compromise the Siebel UI Framework. Successful attacks require human interaction and can lead to unauthorized access to critical data.
A vulnerability in the Oracle VM VirtualBox component allows a high privileged attacker with network access to compromise Oracle VM VirtualBox. Human interaction is required, making the attack easily exploitable.
Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can result in hanging or frequently repeatable crashes (complete DOS) of this technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows remote exploitation by an unauthenticated attacker. Versions 8.5.2 and 8.5.3 are vulnerable to attacks that can lead to hanging or frequently crashing (complete DOS) of Oracle Outside In Technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete some accessible data.
A vulnerability in the Oracle VM VirtualBox component related to shared folders allows a high privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to compromise the software. The attacker can gain unauthorized access to critical data and cause a hang or crash of Oracle VM VirtualBox.
Vulnerability in the Oracle iStore component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction and may lead to unauthorized access to critical data.
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Attacks may lead to unauthorized access to critical data and complete access to all data accessible in Oracle One-to-One Fulfillment.
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction and may lead to unauthorized access to critical data.
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction and may lead to unauthorized access to critical data.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete data.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of this technology.
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Oracle Outside In Technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, affecting versions 8.5.2 and 8.5.3, allows an unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Outside In Technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes of the software.
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite, affecting the Team Member subcomponent. It allows a low privileged attacker with network access via HTTP to compromise the system.