CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the WebLogic Server product of Oracle affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access to easily exploit and potentially take over the WebLogic Server.
Vulnerability in the WebLogic Server product of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise the WebLogic Server. Attacks may significantly impact additional products.
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the connector. Attacks may significantly impact additional products, changing the scope of the threat.
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. The supported version affected is 14.1.2.0.0.
Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server. Affected versions are 14.1.2.0.0 and 15.1.1.0.0.
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. It affects versions 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker with network access to compromise the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker to remotely take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
A vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker to remotely take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker to remotely take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker with network access to take control of the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware allows a low privileged attacker with network access to compromise the system. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle, concerning the Performance Monitor component. Versions 8.61 and 8.62 are susceptible to easily exploitable attacks that can lead to system takeover.
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Attacks may also significantly impact additional products.
Vulnerability in the Identity Manager product of Oracle Fusion Middleware allows a low privileged attacker with network access to compromise Identity Manager. Affected versions are 12.2.1.4.0 and 14.1.2.1.0.
Vulnerability in the WebLogic Server product of Oracle affecting versions 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable by a low privileged attacker with network access via HTTP, potentially leading to takeover of the WebLogic Server.
FileBrowser Quantum versions prior to 1.3.2-stable, 1.4.0-beta, and 1.4.1-beta are vulnerable to Path Traversal. The issue occurs in publicPatchHandler, where user-controlled paths can be manipulated, allowing operations on files outside the shared directory.
The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability, an authenticated attacker can send arbitrary commands to the device that are executed with administrative permissions by the underlying operating system.
In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS