CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the VPD component of Oracle Database Server. A low privileged attacker with Create Table privilege can exploit it over the network via Oracle Net to gain unauthorized creation, deletion or modification access to VPD data. CVSS 8.1.
Vulnerability in the Core component of Oracle WebLogic Server (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via TLS to perform unauthorized update, insert or delete access to some data, read a subset of data, and cause a partial denial of service. CVSS 7.3.
Vulnerability in the RDBMS component of Oracle Database Server. A low privileged attacker with DBMS_VECTOR privilege can exploit it over the network via Oracle Net to take over RDBMS. CVSS 8.8.
Vulnerability in the Workflow Notification Mailer component of Oracle E-Business Suite Workflow. A low privileged attacker can exploit it over the network via HTTP to take over Workflow; exploitation is difficult. CVSS 7.5.
Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via TCP to gain unauthorized creation, deletion or modification access to critical data and full access to connector data; exploitation is difficult. CVSS 7.4.
Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via LDAP to gain unauthorized access to critical connector data. CVSS 7.5.
Vulnerability in the SAP ERP+ component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via HTTP to gain unauthorized creation, deletion or modification access to critical data and full access to connector data; exploitation is difficult and impact may extend beyond the connector (scope change). CVSS 8.7.
Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). A low privileged attacker with local logon to the infrastructure can gain unauthorized creation, deletion or modification access to critical data and full access to connector data. CVSS 7.1.
Vulnerability in the Generic REST component of Oracle Identity Manager Connector (Oracle Fusion Middleware). A low privileged attacker with local logon to the infrastructure can gain unauthorized creation, deletion or modification access to critical data and full access to connector data. CVSS 7.1.
Vulnerability in the Java plugin component of Oracle Java SE (versions 8u503 and 8u503-perf). A low privileged attacker with local logon can gain unauthorized creation, deletion or modification access to critical data and full access to Java SE data; exploitation is difficult and impact may extend beyond Java SE (scope change). Applies to clients running untrusted code in the sandbox (e.g., applets, Web Start). CVSS 7.5.
Vulnerability in Oracle Outside In Technology (Outside In Core component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in PeopleSoft Enterprise SCM Strategic Sourcing (Strategic Sourcing component) version 9.2. A low-privileged attacker with network access via HTTP can take over the application. CVSS 8.8.
Vulnerability in Oracle HTTP Server (Web Listener component) version 12.2.1.4.0. A low-privileged attacker with local access can take over the server. CVSS 7.8.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Integration component) version 9.1. An unauthenticated attacker with network access via Oracle Net can gain unauthorized access to critical data. CVSS 7.5.
Vulnerability in Oracle Outside In Technology (Outside In Image Export SDK component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Oracle Outside In Technology (Outside In Image Export SDK component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Oracle Outside In Technology (Outside In Core component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Oracle Outside In Technology (Outside In Image Export SDK component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS