CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle BI Publisher XML Services component. A low-privileged attacker via HTTP can access critical data.
Vulnerability in Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico). Affects version 9.2. Difficult to exploit, requires network access via HTTP and low privileges. Successful attack can lead to unauthorized creation, deletion, or modification of critical data and partial denial of service.
Vulnerability in PeopleSoft Enterprise HCM Human Resources (Security) version 9.2. Difficult to exploit, requires low privileges and Oracle Net access. Can lead to full confidentiality and integrity compromise.
A vulnerability in Oracle APEX allows a low-privileged attacker with local access to gain complete access to all APEX data.
JD Edwards EnterpriseOne Tools version 9.2.26.3 has a vulnerability in the Installation Security component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data, also affecting other products (scope change).
Vulnerability in MySQL Connectors (Connector/J component) versions 9.7.0-9.7.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Connectors. Human interaction from a person other than the attacker is required.
Vulnerability in the Configuration Management component of JD Edwards EnterpriseOne Configurator (Oracle JD Edwards). A low-privileged attacker via HTTP can cause a complete DoS (hang or frequent crashes) and gain unauthorized data access.
Vulnerability in PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data.
Vulnerability in PeopleSoft Enterprise CS Campus Community product. An unauthenticated attacker with network access via HTTP can gain complete access to all data and unauthorized update, insert, or delete access to some data.
Vulnerability in PeopleSoft Enterprise CS Student Records Research Tracking component. A high-privileged attacker via HTTP can take over the system.
Vulnerability in PeopleSoft Enterprise CS Financial Aid of Oracle PeopleSoft (component: Commonline Loans). Affects version 9.2.38. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to read a subset of data. CVSS 5.3 (Confidentiality impact).
Vulnerability in Oracle PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to access critical data or all data. CVSS 5.9 (Confidentiality impact).
Vulnerability in PeopleSoft Enterprise CS Campus Community Communication component. A low-privileged attacker via HTTPS can access critical data.
Vulnerability in PeopleSoft Enterprise CS Financial Aid (version 9.2.38). Easily exploitable, requires login and low privileges. Attacker can unauthorized create, delete or modify critical data and read a subset of data.
A vulnerability in PeopleSoft Enterprise CS Financial Aid allows a low-privileged attacker with local access to gain complete access to all financial aid data.
Vulnerability in PeopleSoft Enterprise FIN Common Objects (part of Oracle PeopleSoft, component: Security) version 9.2. A low-privileged attacker with local access, after user interaction, can modify critical data.
A vulnerability in PeopleSoft Enterprise FIN Pay/Bill Management allows a low-privileged attacker with local access to gain complete access to all payment and bill management data.
Vulnerability in Oracle Enterprise Asset Management (component: Work Definition Issues) versions 12.2.3-12.2.15. A low-privileged attacker via HTTPS can gain unauthorized read and modify access to data.
Vulnerability in Oracle Project Foundation product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS