CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Report JSPs.
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
An unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite allows remote attackers to affect confidentiality and integrity via vectors related to Notes.
Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 12.1 and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to ODPDA Servlet.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability.
An unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via vectors related to ADF Faces.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.
An unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models.
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before version 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) on a system running an application compiled by ASN1C, via crafted ASN.1 data.
Moxa MGate MB3180 before 1.8, MB3280 before 2.7, MB3480 before 2.6, MB3170 before 2.5, and MB3270 before 2.7 use weak encryption, allowing remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.
The Schneider Electric Pelco Digital Sentry Video Management System with firmware before version 7.14 has hardcoded credentials, allowing remote attackers to gain access and execute arbitrary code.
HPE iMC PLAT and other components before versions 7.2 E0403P04, 7.2 E0405P05, 7.2 E0401P04, 7.2 E0401P01, 7.2 E0402P02, and 7.2 E0405P05 are vulnerable to remote command execution by attackers exploiting a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
In libvirt versions before 2.0.0, password checking is improperly disabled when the password on a VNC server is set to an empty string. This allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.
Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.17, and Acrobat and Acrobat Reader DC Classic before version 15.006.30198, as well as Acrobat and Acrobat Reader DC Continuous before version 15.017.20050 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.