CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon can perform unauthorized modification, read data, and cause partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon can create, delete, or modify critical data, read a subset, and cause hang or repeatable crashes (complete DoS).
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with JDENET network access can gain unauthorized access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment can access and modify critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause hang or repeatable crashes (complete DoS), modify data, and read a subset.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with network access via JDENET can cause a hang or repeatable crash (complete DoS) and gain unauthorized read and update access to some data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Package Build SEC component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon access to the infrastructure can take over the application.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access, requiring user interaction, can take over the application.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via SMTP can modify some data and cause a partial denial of service.
Vulnerability in Oracle VM VirtualBox (Core component) affecting version 7.2.16. A low-privileged attacker with logon access can cause a hang or repeatable crash (complete DoS), potentially impacting other products (scope change).
Vulnerability in Oracle VM VirtualBox (Core component) affecting version 7.2.16. A low-privileged attacker with logon access, requiring user interaction, can cause a hang or repeatable crash (complete DoS), potentially impacting other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can modify and read some data, potentially impacting other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in the product.
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
Vulnerability in Oracle HRMS (India) (Indian Payroll component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with local logon can gain unauthorized access to critical data or all data accessible in the product, and attacks may impact additional products (scope change).
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (Security component) in the listed versions. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS