CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in the Oracle Workflow Cartridge component across multiple Oracle products, including Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2 (9.0.4.2), and E-Business Suite and Applications 11.5.10. The vulnerability has unspecified impact and attack vectors, identified as Oracle Vuln# WF01.
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10, affecting various components such as Application Install, Oracle Applications Framework, Oracle Applications Technology Stack, Oracle Human Resources, Oracle Marketing, Marketing Encyclopedia System, Oracle Trade Management, and Oracle Web Applications Desktop Integration. The vulnerabilities have unspecified impact and attack vectors.
Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 affecting Data Pump, Oracle Text, Streams Apply, Streams Capture, and Streams Subcomponent. One (DB05) involves SQL injection in DBMS_METADATA_UTIL, DBMS_METADATA_INT, and DBMS_METADATA packages.
Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and E-Business Suite and Applications 11.5.10. These flaws have unknown impact and attack vectors, identified as REP01 and REP02.
Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2 (9.0.4.2) in the Reorganize Objects & Convert Tablespace component. May lead to unknown security impacts.
Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business Suite and Applications 11.5.10. The flaws affect the Oracle Workflow Cartridge component and have unspecified impact and attack vectors.
Unspecified vulnerability in the Portal component of Oracle Application Server versions 9.0.4.2 and 10.1.2.0. May lead to unknown security impacts.
Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1. Oracle identified it as JDE01, but details about impact and attack vectors are not disclosed.
Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server versions 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4. An attacker could exploit this flaw, causing unspecified security impact.
Multiple unspecified vulnerabilities were found in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, in the Oracle Forms component. These vulnerabilities, identified as FORM01 and FORM02, have unknown impact and attack vectors.
Unspecified vulnerability in the Query Optimizer component of Oracle Database server versions 9.2.0.6 and 10.1.0.4. May lead to unknown security impacts.
Multiple unspecified vulnerabilities were found in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 in the Dictionary and Oracle Label Security components. One of them (DB07) allows the TDE wallet password to be stored in plaintext in a trace file generated by event 10053.
Multiple unspecified vulnerabilities in Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 were found in the Oracle Text and Program Interface Network components. These vulnerabilities may allow SQL injection attacks in functions such as VALIDATE_STATEMENT, BUILD_DML, CLEAN_DML, GET_ROWID, BROWSE_WORDS, and ODCIINDEXTRUNCATE, ODCIINDEXDROP, and ODCIINDEXDELETE.
Unspecified vulnerability in the Query Optimizer component of Oracle Database server versions 9.0.1.5, 9.2.0.7, and 10.1.0.5. The flaw has unknown impact and attack vectors, identified by Oracle as DB19.
Unspecified vulnerability in the Security component of Oracle Database server versions 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4. May lead to unknown security impacts on the database.
Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4. A reliable independent researcher claims it is SQL injection in the DBMS_REGISTRY package in functions IS_COMPONENT, GET_COMP_OPTION, DISABLE_DDL_TRIGGERS, SCRIPT_EXISTS, COMP_PATH, GATHER_STATS, NOTHING_SCRIPT, and VALIDATE_COMPONENTS.
Unspecified vulnerability in the XML Database component of Oracle Database 9.2.0.7 and 10.1.0.4. Likely a buffer overflow in DBMS_XMLSCHEMA and DBMS_XMLSCHEMA_INT packages, exploitable via long arguments to GENERATESCHEMA or GENERATESCHEMAS.
Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), affecting Email Server, Wireless & Voice, Content Management SDK, and Content Services components. The flaws have unknown impact and attack vectors, identified as OCS01-OCS15.
Multiple unspecified vulnerabilities were discovered in Oracle E-Business Suite and Applications 4.3 within the Oracle iLearning component. These flaws, identified as APPS13 and APPS14, have unknown impact and attack vectors.
Unspecified vulnerability in Oracle Database Server, Application Server, and Collaboration Suite. The flaw resides in the Protocol Support component and may lead to unknown impacts.