CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47. A remote attacker could bypass system access restrictions via a crafted Chrome extension.
Use after free in Date in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Missing authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47. A remote attacker could obtain cross-origin data via a crafted HTML page.
Incorrect calculation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
An observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it to compromise Workflow, potentially impacting other products.
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it to take over Oracle Application Object Library.
Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product (component: Cloud native deployment) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via RMI can easily exploit it to take over Elastic Charging Engine.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized access to critical data and cause a hang or frequently repeatable crash (DoS).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security) affecting versions 4.0.0-4.5.5. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.
Vulnerability in Oracle Solaris (component: Utility) affecting version 11.4. An unauthenticated attacker with network access via TCP can easily exploit it to take over Oracle Solaris. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.
Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.
Vulnerability in Oracle APEX (component: General) affecting versions 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. An unauthenticated attacker with HTTPS network access can easily exploit it to take over Oracle APEX. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package) affecting version 26.1. A low-privileged attacker with network access via Oracle Net can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package) affecting version 26.1. A low-privileged attacker with network access via Oracle Net can easily exploit it to cause unauthorized creation, deletion or modification of critical data, unauthorized read access to a subset of data, and hang or repeatable crash (complete DoS). CVSS 3.1 Base Score is 9.9.
Vulnerability in Oracle WebCenter Sites (Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily compromise the system. CVSS 9.8.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS