CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.
Unspecified vulnerability in Oracle Java SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
An unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of 'admin' for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors.
The Yealink IP Phone SIP-T38G has hardcoded passwords in the config/.htpasswd file for user accounts, making it easier for remote attackers to gain access.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors.
Unspecified vulnerability in HP Intelligent Management Center (iMC) before version 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before version 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors.
An unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA versions 9.5 through 11.0 allows remote authenticated users to gain privileges via unknown vectors.
Infoblox NetMRI before 6.8.5 has a default password of 'admin' for the 'root' MySQL database account, making it easier for local users to gain access via unspecified vectors.
In Infoblox NetMRI before version 6.8.5, a vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
Datum Systems SnIP devices on PSM-500 and PSM-4500 have a hardcoded password of 'admin' for the admin account, making it easier for remote attackers to gain access via unspecified vectors.