CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure where VirtualBox runs to take over the product. This vulnerability applies to Windows hosts only.
Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure where VirtualBox runs to take over the product. This vulnerability applies to Windows hosts only.
Vulnerability in Oracle Agile PLM (component: Application Server) affecting version 9.3.6. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and cause a partial denial of service.
Vulnerability in Oracle Purchasing (component: Other issue) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to create, delete or modify data and gain unauthorized access to critical information.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Integration Broker) affecting versions 8.61-8.63. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to create, delete or modify data, and the attack may significantly impact additional products (scope change).
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to data and to update, insert or delete it.
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with logon to gain unauthorized access to data and to update, insert or delete it, and the attack may significantly impact additional products (scope change).
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with access to the physical communication segment to create, delete or modify data and gain unauthorized access to it.
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with logon to create, delete or modify data and gain unauthorized access to it, and the attack may significantly impact additional products (scope change).
Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) affecting version 9.3.6. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to data and to update, insert or delete it, but it requires human interaction and may significantly impact additional products (scope change).
Vulnerability in Oracle Agile PLM (component: SDK) version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. The attack may also impact additional products (scope change).
Vulnerability in Oracle Agile PLM (component: Application Server) version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. The attack may also impact additional products (scope change).
Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) version 9.3.6, difficult to exploit, allows a low-privileged attacker with network access via HTTP to take over Oracle Agile PLM. Impacts confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and modify it. Requires user interaction and may impact additional products (scope change).
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and cause a partial denial of service (partial DoS). Requires user interaction.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000, difficult to exploit, allows a low-privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management. Impacts confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a high-privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management. Impacts confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a low-privileged attacker with access to the physical communication segment attached to the hardware running Oracle Hyperion Financial Management to take over the system. Impacts confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a high-privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management. Impacts confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000, difficult to exploit, allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running Oracle Hyperion Financial Management to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to it. May impact additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS