CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle JavaFX (component: JavaFX) affecting versions 25.0.4 and 27. A difficult to exploit flaw allows an unauthenticated network attacker to read a subset of data, requiring user interaction; applies to clients running sandboxed Java Web Start/applets.
Vulnerability in PeopleSoft Enterprise CC Common Application Objects (component: BAM Framework) version 9.2. A difficult to exploit flaw allows an unauthenticated network attacker via HTTP to perform unauthorized update, insert or delete of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: JSSE). A difficult to exploit flaw allows an unauthenticated network attacker via TLS to perform unauthorized update, insert or delete of data; exploitable via component APIs, e.g., through a web service.
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A difficult to exploit flaw allows a high privileged attacker with infrastructure logon to perform unauthorized update, insert or delete, read a subset of data, and cause partial denial of service.
Vulnerability in Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An easily exploitable flaw allows a high privileged attacker with infrastructure logon to cause partial denial of service.
Vulnerability in Oracle Java SE (component: Networking) version 27. A difficult to exploit flaw allows an unauthenticated network attacker to cause partial denial of service; exploitable via component APIs, e.g., a web service, and applies to sandboxed Java clients.
Vulnerability in Oracle Java SE, Oracle JavaFX and Oracle GraalVM Enterprise Edition (component: JavaFX). A difficult to exploit flaw allows an unauthenticated network attacker to read a subset of data, requiring user interaction; applies to sandboxed Java clients.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: Sound). A difficult to exploit flaw allows an unauthenticated network attacker to cause partial denial of service, requiring user interaction; applies to sandboxed Java clients.
Vulnerability in the Serviceability component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. It is difficult to exploit, requires logon to the infrastructure and human interaction, and can lead to unauthorized update, insert or delete access to data and partial denial of service.
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data, but requires user interaction.
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to modify, insert, or delete some data without user interaction.
Vulnerability in Oracle Siebel CRM End User (Open UI component) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to read a subset of data without authorization.
Vulnerability in Oracle Java SE and Oracle GraalVM Enterprise Edition (2D component) affecting versions 8u503, 8u503-perf, and 21.3.19.1.1. A difficult-to-exploit flaw allows an unauthenticated network attacker to modify, insert, or delete some data; also applies to sandboxed Java Web Start/applet deployments.
Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3-26.9. An easily exploitable flaw allows a low-privileged attacker with local access to read a subset of data without authorization.
Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) affecting versions 22.3-26.9. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to read a subset of data without authorization.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (AWT component) across multiple versions. A difficult-to-exploit flaw allows a low-privileged network attacker to read a subset of data, but requires user interaction; applies to sandboxed Java clients.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (ImageIO component) across multiple versions. A difficult-to-exploit flaw allows an unauthenticated network attacker to read a subset of data; also applies to sandboxed Java clients.
Vulnerability in Oracle Java SE (Security component) affecting versions 21.0.12.1, 25.0.4.1, and 27. A difficult-to-exploit flaw allows an unauthenticated network attacker to modify, insert, or delete some data; also applies to sandboxed Java clients.
Vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects (Common Application Objects component) affecting version 9.2. An easily exploitable flaw allows a high-privileged network attacker via HTTP to modify, insert, or delete some data and read a subset of data without authorization.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security). Affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to cause a partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS