CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Updates Environment Mgmt component of PeopleSoft Enterprise PeopleTools (Oracle PeopleSoft) affecting versions 8.61-8.63. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some PeopleTools accessible data.
Vulnerability in the Compiler component of Oracle Java SE (versions 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized update, insert, or delete operations on some data and unauthorized read access to a subset of data; exploitation requires supplying data to the component's APIs without using untrusted Java Web Start applications or applets.
Vulnerability in the General Ledger component of PeopleSoft Enterprise FIN General Ledger Brazil (Oracle PeopleSoft) affecting version 9.1. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to perform unauthorized update, insert, or delete operations on some data and cause a partial denial of service (partial DOS).
Vulnerability in the Bidder Registration component of PeopleSoft Enterprise SCM Strategic Sourcing (Oracle PeopleSoft) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible in the application.
Vulnerability in the Supplier Registration component of PeopleSoft Enterprise SCM Purchasing (Oracle PeopleSoft) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some data and unauthorized read access to a subset of data; the attack requires user interaction and may impact additional products (scope change).
Vulnerability in the Strategic Sourcing component of PeopleSoft Enterprise SCM Strategic Sourcing (Oracle PeopleSoft) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible in the application.
Vulnerability in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running RDBMS to cause a hang or frequently repeatable crash (complete DOS).
Vulnerability in the eProcurement component of PeopleSoft Enterprise FIN Common Objects Brazil (Oracle PeopleSoft) affecting version 9.1. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data accessible in the application.
Vulnerability in the Outside In Clean Content SDK component of Oracle Outside In Technology (Oracle Fusion Middleware) affecting version 8.5.8. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to perform unauthorized creation, deletion, or modification of critical data, unauthorized read access to a subset of data, and cause a partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component eProcurement) version 9.1. A high-privileged attacker with access to the physical communication segment can create, delete, or modify critical data and gain full access to it without authorization.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component QAS) versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can perform unauthorized updates, inserts, or deletes and cause a partial denial of service (partial DoS).
Vulnerability in Oracle Fusion Middleware Control (component Framework) versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with physical access can, with user interaction, take over Oracle Fusion Middleware Control.
Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component Asset Management) version 9.1. A high-privileged attacker with network access via HTTP can, with user interaction, create, delete, or modify critical data, gain full access to it, and cause a partial denial of service.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component JGSS). A difficult-to-exploit unauthenticated attacker with network access can, with user interaction, gain unauthorized access to critical data. Applies to clients running sandboxed Java Web Start applications or applets.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component JGSS). A difficult-to-exploit unauthenticated attacker with network access can, with user interaction, gain unauthorized access to critical data. Applies to clients running sandboxed Java Web Start applications or applets.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component JGSS). A difficult-to-exploit unauthenticated attacker with network access can perform unauthorized creation, deletion, or modification of critical data. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - UNIX) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via HTTP can, with user interaction, perform unauthorized updates, inserts, or deletes and gain unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component Lightweight HTTP Server). An unauthenticated attacker with network access can perform unauthorized updates, inserts, or deletes. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component Networking). An unauthenticated attacker with network access can perform unauthorized updates, inserts, or deletes. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle Java SE (component: Networking). An unauthenticated attacker with network access can exploit it by supplying data to APIs in the component, resulting in unauthorized update, insert or delete access to some Oracle Java SE accessible data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS