CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle VM VirtualBox (Core component) affects versions 7.1.12 and 7.2.2. A high-privileged attacker with local access can compromise VirtualBox. The vulnerability may impact additional products (scope change).
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration) affecting versions 12.2.3-12.2.14. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing (CVSS 9.8).
Vulnerability in the Oracle ZFS Storage Appliance Kit product (component: Naming Subsystem). The supported version affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit, resulting in unauthorized ability to cause a partial denial of service. CVSS 3.1 Base Score 2.7 (Availability impacts).
Vulnerability in Oracle ZFS Storage Appliance Kit (component: Block Storage). Affected version is 8.8. A high privileged attacker with network access via HTTP can compromise the appliance, resulting in partial denial of service. CVSS 3.1 Base Score 2.7 (Availability impacts).
Oracle ZFS Storage Appliance Kit version 8.8 contains a vulnerability in the Object Store component. A high privileged attacker with network access via HTTP can exploit it to cause a hang or frequently repeatable crash (complete DOS). CVSS 4.9 (Availability impact).
Oracle ZFS Storage Appliance Kit version 8.8 contains a vulnerability in the Remote Replication component. A high privileged attacker with network access via HTTP can exploit it to cause a hang or frequently repeatable crash (complete DOS). CVSS 4.9 (Availability impact).
Vulnerability in Oracle ZFS Storage Appliance Kit (component: Remote Replication) affecting version 8.8. A high-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the appliance.
Oracle ZFS Storage Appliance Kit version 8.8 contains a vulnerability in the Core component. A high privileged attacker with network access via HTTP can exploit it to cause a hang or frequently repeatable crash (complete DOS). CVSS 4.9 (Availability impact).
Vulnerability in Oracle ZFS Storage Appliance Kit (Block Storage component) version 8.8. A high privileged attacker with network access via HTTP can compromise the appliance, potentially leading to full takeover. CVSS 7.2.
Vulnerability in Oracle ZFS Storage Appliance Kit version 8.8, in the Filesystems component. A high privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the appliance. CVSS 4.9 (Availability impact).
A vulnerability in Oracle Health Sciences Data Management Workbench (Logger component) affects versions 3.4.0.1.3 and 3.4.1.0.10. It allows a high-privileged attacker with network access via HTTP to compromise data confidentiality, including full access to all accessible data.
Vulnerability in Oracle Life Sciences InForm (component: Web Server) version 7.0.1.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring user interaction. The attack may impact additional products (scope change) and result in unauthorized access to some InForm data (read, update, insert, delete). CVSS 6.1.
Vulnerability in Oracle Life Sciences InForm (Web Server component) version 7.0.1.0. A low-privileged attacker with network access via HTTP can compromise the product, resulting in unauthorized read access to a subset of data. CVSS 4.3 (Confidentiality impact).
Vulnerability in the Java VM component of Oracle Database Server (versions 19.3-19.28, 21.3-21.19, 23.4-23.9). Difficult to exploit, allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks can result in unauthorized creation, deletion or modification of critical data or all Java VM accessible data. CVSS 5.9 (Integrity impact).
A vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP. It allows unauthorized read access to a subset of data.
Vulnerability in Oracle Essbase (Essbase Web Platform component) version 21.7.3.0.0. A low-privileged attacker can access via HTTP to compromise data, including unauthorized creation, deletion, or modification. CVSS 8.1.
Vulnerability in Oracle PeopleSoft Enterprise FIN Payables (Payables component) affects version 9.2. A low-privileged attacker with network access via HTTP can exploit it, leading to unauthorized update, insert, or delete access to data, unauthorized read access to a subset of data, and partial denial of service.
Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Maintenance Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Maintenance Management accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Maintenance Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).
A vulnerability in the Oracle VM VirtualBox product (component: Core) affects versions 7.1.12 and 7.2.2. This difficult-to-exploit flaw allows a low-privileged attacker with logon access to the infrastructure where VirtualBox runs to compromise the product; it requires human interaction from someone other than the attacker and may significantly impact additional products (scope change). Successful exploitation can result in takeover of Oracle VM VirtualBox.
Vulnerability in Oracle VM VirtualBox (component: Core) versions 7.1.12 and 7.2.2. Easily exploitable by a low-privileged attacker with logon to the infrastructure where VirtualBox executes. The attack may impact additional products (scope change) and result in unauthorized access to critical data or complete access to all VirtualBox data. CVSS 6.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS