CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. An easily exploitable flaw allows a high-privileged attacker with access to the physical communication segment to compromise Oracle VM VirtualBox.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise JD Edwards EnterpriseOne Tools.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Interoperability SEC) affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via TLS to gain unauthorized creation, deletion, or modification access to critical data and access to it.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Interoperability SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Database and Comm SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to take over the system.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Package Build SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to create, delete or modify data and to cause a hang or repeatable crash of the system.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with local logon to the infrastructure to create, delete or modify data and gain full access to system data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Interoperability SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data and cause a partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Interoperability SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to create, delete or modify data and gain full access to system data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to take over the system.
Vulnerability in Oracle Outside In Technology (component Outside In Core) affecting version 8.5.8. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data, and attacks may impact additional products (scope change).
Vulnerability in Oracle VM VirtualBox (component Core) affecting version 7.2.16. An easily exploitable flaw allows a low-privileged attacker with local logon to gain unauthorized access to critical data and cause a hang or repeatable crash, and attacks may impact additional products (scope change).
Vulnerability in Oracle Weblogic Server Proxy Plug-in (component WebLogic Server Proxy Plug-In for Third-Party Web Servers) affecting versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to create, delete or modify data and access critical data, and attacks may impact additional products (scope change).
Vulnerability in Oracle Access Manager (component Authentication Engine) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Server component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over the system.
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key. Each stanza is 98 bytes of attacker-chosen header, and the file is rejected only after every attempt has run.
Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to create, delete or modify critical data and gain full access to Oracle Access Manager data.
Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with SAML network access to take over Oracle Access Manager.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS