CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Cisco IOS versions 12.0 to 12.4 may allow a remote attacker to execute arbitrary code via a heap-based buffer overflow in system timers. However, this is not a specific vulnerability but a general design weakness that increases the risk of exploiting other potential vulnerabilities.
SQL injection vulnerability in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary SQL commands.
SQL injection vulnerability in index.php in News2Net 3.0.0.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.
Unspecified vulnerability in Oracle E-Business Suite and Applications versions 4.5 through 4.5.1, identified as Oracle Vuln# APPS22 in Oracle Clinical. Details regarding impact and attack vectors are unknown.
Unspecified vulnerability in the Internet Directory component of Oracle Database Server 9i up to version 9.2.0.6 and Application Server from 9.0.2.3 to 10.1.2.0. Details regarding impact and attack vectors are unknown, identified as Oracle Vuln# DB32 and AS06.
Unspecified vulnerability in Oracle E-Business Suite and Applications versions 11.0 through 11.5.10, identified as Oracle Vuln# APPS08 in HRMS. The impact and attack vectors are unknown.
Unspecified vulnerability in the HTTP Server in Oracle Application Server versions 1.0 through 9.0.2.3. Its impact and attack vectors are unknown, identified as Oracle Vuln# AS04.
Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1. It has unknown impact and attack vectors, identified as Oracle Vuln# JDE01.
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications versions 11.5 through 11.5.10, affecting various components such as Application Install, Application Object Library, Applications Technology Stack, Utilities, HRMS, Mobile Application Foundation, SDP Number Portability, Oracle Service, Service Fulfillment Manage, Universal Work Queue, and Workflow Cartridge. The impact and attack vectors are unknown.
Unspecified vulnerability in the Enterprise CRM Sales component in Oracle versions 8.81 through 8.9. The impact and attack vectors are unknown, identified by Oracle as Vuln# CRM01.
Unspecified vulnerability in PeopleTools component of Oracle PeopleSoft Enterprise versions 8.44 through 8.46.03. Impact and attack vectors are unknown, identified by Oracle as Vuln# PSE03.
Unspecified vulnerability in the SQL*ReportWriter component in Oracle Application Server 9.0 up to version 9.0.2.1. Details about impact and attack vectors are unknown, identified by Oracle as Vuln# AS10.
Unspecified vulnerability in the Web Cache component of Oracle Application Server versions 1.0 through 9.0.4.2. The impact and attack vectors are unknown, identified as Oracle Vuln# AS13.
Multiple unspecified vulnerabilities have been discovered in Oracle Collaboration Suite 10g Release 1 (10.1.1) and 9i Release 2 (9.0.4.2) in Calendar, Email Server, and Oracle Files components. Their impact and attack vectors are unknown, identified by Oracle as numbers OCS01-OCS13.
Unspecified vulnerability in the OC4J Module in Oracle Application Server versions 9.0 up to 10.1.2.0.2. It may have unknown impact and attack vectors, as identified by Oracle Vuln# AS01.
Unspecified vulnerability in PeopleTools component of Oracle PeopleSoft Enterprise versions 8.44 through 8.46.02. Impact and attack vectors are unknown, identified by Oracle as Vuln# PSE02.
Unspecified vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise versions 8.42 through 8.45.17. The impact and attack vectors are unknown, identified by Oracle as Vuln# PSE01.
Unspecified vulnerability in Oracle E-Business Suite and Applications versions 11.0 through 11.5.9, identified as Oracle Vuln# APPS19 in the Workflow Cartridge component. Impact and attack vectors are unknown.
Multiple unspecified vulnerabilities have been discovered in Oracle E-Business Suite and Applications versions 11.5 through 11.5.9. These flaws affect the Application Object Library (APPS04) and Workflow Cartridge (APPS17, APPS18, APPS21) components and have unknown impact and attack vectors.
Multiple unspecified vulnerabilities in the Web Cache component of Oracle Application Server versions 1.0 through 10.1.2.0 have unknown impact and attack vectors, identified by Oracle as vulnerabilities AS12 and AS14.