CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Oracle Health Sciences Data Management Workbench (Logger component) affects versions 3.4.0.1.3 and 3.4.1.0.10. It allows a high-privileged attacker with network access via HTTP to compromise data confidentiality, including full access to all accessible data.
Vulnerability in Oracle Life Sciences InForm (component: Web Server) version 7.0.1.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring user interaction. The attack may impact additional products (scope change) and result in unauthorized access to some InForm data (read, update, insert, delete). CVSS 6.1.
Vulnerability in Oracle Life Sciences InForm (Web Server component) version 7.0.1.0. A low-privileged attacker with network access via HTTP can compromise the product, resulting in unauthorized read access to a subset of data. CVSS 4.3 (Confidentiality impact).
Vulnerability in the Java VM component of Oracle Database Server (versions 19.3-19.28, 21.3-21.19, 23.4-23.9). Difficult to exploit, allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks can result in unauthorized creation, deletion or modification of critical data or all Java VM accessible data. CVSS 5.9 (Integrity impact).
A vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP. It allows unauthorized read access to a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise FIN Payables (Payables component) affects version 9.2. A low-privileged attacker with network access via HTTP can exploit it, leading to unauthorized update, insert, or delete access to data, unauthorized read access to a subset of data, and partial denial of service.
Vulnerability in the PeopleSoft Enterprise FIN Maintenance Management product of Oracle PeopleSoft (component: Work Order Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Maintenance Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Maintenance Management accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise FIN Maintenance Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).
Vulnerability in Oracle VM VirtualBox (component: Core) versions 7.1.12 and 7.2.2. Easily exploitable by a low-privileged attacker with logon to the infrastructure where VirtualBox executes. The attack may impact additional products (scope change) and result in unauthorized access to critical data or complete access to all VirtualBox data. CVSS 6.5.
PeopleSoft Enterprise FIN IT Asset Management version 9.2 contains a vulnerability in the IT Asset Management component. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all accessible data. CVSS 6.5 (Confidentiality impact).
Oracle BI Publisher versions 7.6.0.0.0 and 8.2.0.0.0 contain a vulnerability in the Web Service API component. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all accessible data. CVSS 6.5 (Confidentiality impact).
Vulnerability in Oracle Scripting (Oracle E-Business Suite, Miscellaneous component) versions 12.2.3-12.2.14. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some Oracle Scripting data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Query) affecting versions 8.61 and 8.62. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized read access to a subset of accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).
Vulnerability in Oracle Applications Framework (Upload Attachments component) in versions 12.2.3-12.2.14. A low-privileged attacker with network access via HTTP can compromise the product, resulting in unauthorized update, insert, or delete access to some data. CVSS 4.3 (Integrity impact).
Vulnerability in Oracle Solaris 11, Filesystem component. It requires high privileges and user interaction but can lead to a hang or frequently repeatable crash (complete DoS).
A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server.
Vulnerability in Oracle Solaris 11, Kernel component. A low-privileged attacker with local access can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 9.0.0-9.4.0. Easily exploitable by a high privileged attacker with network access via multiple protocols, can cause a hang or frequently repeatable crash (complete DoS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. An unauthenticated attacker with network access via HTTP can exploit it, but user interaction is required. Impact includes unauthorized update, insert, delete, and read access to some data.
A vulnerability in Oracle Applications Framework (part of Oracle E-Business Suite) in the Personalization component. Affects versions 12.2.3-12.2.14. A low-privileged attacker can access via HTTP and compromise the framework, leading to unauthorized update, insert, or delete access to some data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) in versions 8.60, 8.61, and 8.62. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to data (read and modify).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS