CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle VM VirtualBox component related to SVGA emulation allows easy exploitation by a low privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs. This can lead to unauthorized access to critical data and cause system crashes.
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI) allows a low privileged attacker with network access via HTTP to compromise the Siebel UI Framework. Successful attacks require human interaction from a person other than the attacker, and while the vulnerability is in the Siebel UI Framework, attacks may significantly impact additional products.
Vulnerability in the Resources Module of the Oracle Common Applications component in Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications. It requires human interaction, increasing the risk for the organization.
Vulnerability in the Resources Module of the Oracle Common Applications component in Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications. It requires human interaction, increasing the risk for the organization.
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the applications. Successful attacks require human interaction, increasing the risk of unauthorized access to critical data.
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI) allows an unauthenticated attacker with network access via HTTP to compromise the Siebel UI Framework. Successful attacks require human interaction and can lead to unauthorized access to critical data.
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Affected versions include 8.2, 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2.
A vulnerability in the Oracle VM VirtualBox component allows a high privileged attacker with network access to compromise Oracle VM VirtualBox. Human interaction is required, making the attack easily exploitable.
Vulnerability in the OJVM component of Oracle Database Server, affecting versions 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows a low privileged attacker to compromise OJVM with required human interaction from a person other than the attacker.
Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can result in hanging or frequently repeatable crashes (complete DOS) of this technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows remote exploitation by an unauthenticated attacker. Versions 8.5.2 and 8.5.3 are vulnerable to attacks that can lead to hanging or frequently crashing (complete DOS) of Oracle Outside In Technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete some accessible data.
A vulnerability in the Oracle VM VirtualBox component related to shared folders allows a high privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to compromise the software. The attacker can gain unauthorized access to critical data and cause a hang or crash of Oracle VM VirtualBox.
Vulnerability in the Java SE and Java SE Embedded component of Oracle Java SE that allows an unauthenticated attacker with network access to compromise these systems. Successful attacks require human interaction, and their impact may significantly affect additional products.
Vulnerability in the Oracle iStore component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction and may lead to unauthorized access to critical data.
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Attacks may lead to unauthorized access to critical data and complete access to all data accessible in Oracle One-to-One Fulfillment.