CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction and may lead to unauthorized access to critical data.
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction and may lead to unauthorized access to critical data.
Vulnerability in the Java SE and Java SE Embedded components allows an unauthenticated attacker with network access to compromise these systems. It requires user interaction, making the attack easy to execute.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to unauthorized access to critical data and the ability to update, insert, or delete data.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of this technology.
A vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Oracle Outside In Technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware, affecting versions 8.5.2 and 8.5.3, allows an unauthenticated attacker with network access via HTTP to compromise Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS) of Outside In Technology.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks can lead to hanging or frequently repeatable crashes of the software.
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Affected versions are 8.5.2 and 8.5.3.
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite, affecting the Team Member subcomponent. It allows a low privileged attacker with network access via HTTP to compromise the system.
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) affects versions 7u121 and 8u112. It allows an unauthenticated attacker with network access to compromise Java SE, requiring user interaction.
Vulnerability in the Java SE, Java SE Embedded, and JRockit components allows an unauthenticated attacker with network access to compromise these systems. Successful attacks can result in hangs or frequent crashes, leading to complete denial of service.
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful attacks can lead to unauthorized access to data and cause a partial denial of service.
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise the server. Successful attacks can lead to unauthorized access to data and partial denial of service.
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to compromise the server. Affected versions are 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1.
A vulnerability in the Java SE, Java SE Embedded, and JRockit components allows an unauthenticated attacker with network access to compromise these systems. The attacker can exploit this vulnerability by supplying data to APIs without using untrusted Java Web Start applications or untrusted Java applets.
The casrvc program in CA Common Services allows local users to modify arbitrary files, potentially gaining root privileges. This issue affects versions of CA Client Automation, CA SystemEDGE, CA Systems Performance, CA Universal Job Management Agent, CA Virtual Assurance, and CA Workload Automation across various operating systems.
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that exceeds the initialized buffer.
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause application crashes.