CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to gain unauthorized access to critical data and modify it. The attack requires user interaction and impacts additional products.
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP, with potential impact on additional products (scope change).
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Oracle WebLogic Server (Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contain an easily exploitable vulnerability allowing an unauthenticated attacker unauthorized access to critical data and the ability to modify or delete it.
Vulnerability in Oracle WebLogic Server (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A low-privileged attacker can remotely compromise the server via SAML, with potential impact on additional products (scope change).
In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via TCP. Successful attack can lead to complete server takeover.
Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using T3 and IIOP protocols. The attack does not impact other products (no scope change).
Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using T3 and IIOP protocols. The attack does not impact other products (no scope change).
Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using SOAP. The attack does not impact other products (no scope change).
Vulnerability in Oracle WebLogic Server allows an unauthenticated attacker via HTTP to take over the server. Exploitation is easy and requires no privileges.
In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via T3 and IIOP protocols. Successful attack can lead to complete server takeover.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle BI Publisher (BI Platform Security component) allows an unauthenticated attacker to compromise the system over HTTP. Attack complexity is low, CVSS score is 9.8.
A vulnerability in Oracle Hospitality Simphony (POS component) allows an unauthenticated attacker via HTTP to modify critical data and cause a complete denial of service. CVSS 9.1.
In AMMOS Instrument Toolkit (formerly BLISS) versions before 2.6.1 and version 3.1.0, the Binary Stream Capture (BSC) component exposes an unauthenticated HTTP API for dynamically creating packet capture handlers. The code blindly trusts path-related form fields, allowing a remote attacker to bypass the configured log root and write attacker-controlled data to arbitrary filesystem paths (path traversal).