CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Communications Unified Inventory Management (component: Security) affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. A low-privileged attacker with network access via HTTP can exploit this vulnerability, leading to takeover of the application.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affects version 6.2.4. A low-privileged attacker with network access via HTTP can exploit this vulnerability, which requires user interaction, leading to takeover of the application.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. A low-privileged attacker with logon to the infrastructure where VirtualBox executes can exploit this vulnerability, which requires user interaction, leading to takeover of VirtualBox and potentially impacting other products.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. A low-privileged attacker with logon to the infrastructure where VirtualBox executes can easily exploit this vulnerability, leading to takeover of VirtualBox.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affects version 6.2.4. A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the application.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component Product Quality Management) version 6.2.4. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to takeover of the system.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component Product Quality Management) version 6.2.4. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and partial DOS.
Vulnerability in Oracle Helidon (component helidon-cors) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP, leading to unauthorized modification and read access to data and impact on other products.
Vulnerability in Oracle Helidon (component helidon-common-mapper) versions 4.0.0-4.5.5 and 27.0.0. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to cause unauthorized modification of data, partial read access, and partial DOS.
Vulnerability in Oracle Helidon (component helidon-grpc-server) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to unauthorized modification and read access to data and impact on other products.
Vulnerability in Oracle Helidon (component helidon-webclient-http2) versions 4.0.0-4.5.5 and 27.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to a hang or frequently repeatable crash (complete DOS).
Vulnerability in Oracle Cost Management (component Cost Planning) versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to takeover of the system.
Vulnerability in Oracle Application Object Library (component DB Privileges) versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with logon to the infrastructure, leading to takeover of the system.
Vulnerability in Oracle Agile PLM (component Acollect) version 2.6. Easily exploitable by an unauthenticated attacker with network access via HTTP, leading to unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Commerce Platform (component Dynamo Commerce Server) version 11.4.0. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and partial read access.
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. CVSS 3.1 Base Score 7.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS