CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the CORBA component of Oracle Java SE and GraalVM Enterprise Edition. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS).
Vulnerability in the Server Infrastructure component of Siebel CRM Deployment. A difficult-to-exploit attack requires user interaction and can lead to unauthorized access to critical data.
Vulnerability in the Integration - Scripting component of Siebel CRM Development. A high-privileged attacker with network access via CORBA can cause a hang or repeatable crash (complete DoS) and unauthorized data modification and read access.
Vulnerability in the Open UI component of Siebel CRM End User. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical or all data.
Vulnerability in the JGSS component of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. A difficult-to-exploit attack can cause a hang or repeatable crash (complete DoS) and unauthorized data modification.
Vulnerability in the Libraries component of Oracle Java SE. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS).
Vulnerability in the Outside In PDF Export SDK component of Oracle Outside In Technology. An attacker with logon to the infrastructure can gain unauthorized read access to a subset of data.
Vulnerability in the Web Access component of Primavera P6 Enterprise Project Portfolio Management. A low-privileged attacker with network access via HTTP can perform unauthorized update, insert or delete of some data.
Vulnerability in the Networking component of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. A difficult-to-exploit attack via SOCKS5 can lead to unauthorized creation, deletion or modification of critical data, with possible impact on additional products.
Vulnerability in the Utility component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can exploit it to cause unauthorized data modification and partial denial of service.
Vulnerability in the Utility component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can exploit it to cause unauthorized data modification and partial denial of service.
Vulnerability in the Networking component of Oracle Java SE and Oracle GraalVM for JDK. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to gain unauthorized access to critical data or all Java-accessible data.
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized modification and read access to some data, potentially impacting additional products.
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access, with user interaction, to perform unauthorized modification and read access to some data, potentially impacting additional products.
Vulnerability in the Open UI component of Siebel CRM End User (versions 17.0-26.9). A low-privileged attacker with HTTP network access can perform unauthorized modification and read access to some data.
Vulnerability in the E1 IOT Orchestrator Security component of JD Edwards EnterpriseOne Orchestrator (versions 9.2.0.0-9.2.26.5). A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data and to create, delete, or modify it.
Vulnerability in the JavaFX component of Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can, with user interaction, perform unauthorized modification and read access to some data. The flaw affects clients running untrusted code in a sandbox.
Vulnerability in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with JDENET network access can gain unauthorized access to critical data or all data accessible in the product.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Monitoring and Diagnostics SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access to compromise the product, and attacks may significantly impact additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS