CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle VM VirtualBox version 7.2.12, component Core. A low-privileged attacker with local access can easily take over VirtualBox.
Vulnerability in the RDBMS component of Oracle Database Server versions 23.4.0-23.26.2. An unauthenticated attacker with network access via Oracle Net can cause a complete denial of service (DoS) and unauthorized modification, insertion, or deletion of some data.
Vulnerability in Oracle Fusion Middleware's Oracle Access Manager product (component: Authentication Engine). Affected version is 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Access Manager.
Vulnerability in Oracle Contracts Integration (Oracle E-Business Suite product, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the contracts integration, also impacting other products.
Vulnerability in Oracle Bills of Material (component: Bill Issues) allows a low-privileged attacker with network access via HTTP to compromise the system. No user interaction is required.
Vulnerability in Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Affected versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise all data confidentiality and integrity.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: OpenSearch Dashboards). An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized access to critical data, affecting other products.
Vulnerability in Oracle Product Hub (Item Catalog component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to all data and the ability to create, delete, or modify it.
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via HTTPS. The attack is easily exploitable.
Vulnerability in PeopleSoft Enterprise PeopleTools (Process Scheduler component) allows a low-privileged authenticated attacker to modify and read critical data in other products (scope change). User interaction is required.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) version 8.62. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, but user interaction is required. The attack may impact additional products (scope change) and lead to unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Security). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the application, leading to unauthorized creation, deletion, or modification of critical data and access to all application data.
Vulnerability in Oracle Communications Pricing Design Center (component: On-premise Deployment). A low-privileged attacker with local access can gain unauthorized access to critical data and modify some data. The attack may affect other products. CVSS 7.3.
Vulnerability in Oracle Enterprise Manager Base Platform (Self Update Framework component) allows a high-privileged attacker via HTTPS to take over the platform.
Vulnerability in Oracle Enterprise Manager Base Platform (Self Update Framework component) allows a high-privileged attacker via HTTPS to take over the platform.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Self Update Framework) allows a low-privileged attacker with network access via HTTPS to compromise the system. No user interaction is required.
Vulnerability in Oracle Enterprise Manager Base Platform (Discovery Framework component) allows an unauthenticated attacker with network access via HTTPS to modify critical data, partially read data, and cause partial denial of service. The attack is difficult to exploit.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Metadata Plugin). An unauthenticated attacker with network access via HTTPS can take over the platform, but requires user interaction.
Vulnerability in Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager, component Metadata Plugin. Affects versions 13.5 and 24.1. A low-privileged attacker with network access via HTTPS can gain unauthorized access to create, delete, or modify critical data and read a subset of data.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Metadata Plugin) allows a low-privileged attacker with network access via HTTPS to compromise the system. No user interaction is required.