CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Two unspecified vulnerabilities (EM01 and EM02) were found in the Reporting Framework component of Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7. Their impact and attack vectors are unknown.
Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications. The impact and attack vectors are unknown, and the issue is identified as Vuln# OPA01.
Multiple unspecified vulnerabilities in the Email Server component of Oracle Collaboration Suite versions 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1. These flaws have unknown impact and attack vectors, identified as OCS01, OCS02, OCS03, and OCS04.
An unspecified vulnerability in Oracle Spatial allows SQL injection via MDSYS.PRVT_IDX functions. The flaw affects Oracle Database versions 8.1.7.4, 9.0.1.5, and 9.2.0.6.
Unspecified vulnerability in the Oracle Spatial component of Oracle Database Server versions 9.2.0.7, 10.1.0.4, and 10.2.0.1. Impact and attack vectors are unknown.
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1. The impact and attack vectors are unknown, and the issue is tracked as Vuln# JDE01.
A buffer overflow vulnerability in the Advanced Replication component of Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package.
Multiple unspecified vulnerabilities were discovered in Oracle Database Server components Advanced Replication and Oracle Spatial. These vulnerabilities may allow attacks with unknown impact, including potential SQL injection in the SDO_CATALOG package functions.
Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 and 1.4 allow remote attackers to execute arbitrary PHP code by sending a crafted HTTP request with a URL in the myevent_path parameter to event.php or initialize.php.
Multiple buffer overflows in W3C Amaya 9.4 and versions 8.x before 8.8.5 allow remote attackers to execute arbitrary code via a long value in the COMPACT attribute of the COLGROUP element, the ROWS attribute of the TEXTAREA element, or the COLOR attribute of the LEGEND element, as well as through other unspecified attack vectors.
Multiple unspecified vulnerabilities were discovered in Oracle E-Business Suite and Applications version 11.5.10 in components iProcurement, Oracle Application Object Library, Oracle Applications Technology Stack, and Oracle Order Capture. These vulnerabilities have unknown impact and attack vectors.
Unspecified vulnerability in the Oracle Spatial component of Oracle Database Server versions 8.1.7.4, 9.0.1.5, and 9.2.0.7. Impact and attack vectors are unknown.
Unspecified vulnerability in the Export component of Oracle Database Server versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2. Details on impact and attack vectors are unknown, and Oracle has not confirmed if this is the same issue as CVE-2006-2081.
Unspecified vulnerability in the PeopleTools component of Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04. Impact and attack vectors are unknown, identified as Vuln# PSE01.
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications version 11.5.10CU1. Has unknown impact and attack vectors, known as Vuln# APPS05.
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.
Unspecified vulnerability in the Oracle Spatial component of Oracle Database Server 9.2.0.7 and 10.1.0.4. An independent researcher claims the issue is SQL injection in the GEN_RID_RANGE_BY_AREA and GEN_RID_RANGE functions of the MDSYS.SDO_PRIDX package.
Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9. May lead to unknown impacts and attack vectors.
Multiple unspecified vulnerabilities were found in Oracle E-Business Suite and Applications 11.5.10CU2 in components: Application Install, Oracle Diagnostics Interfaces, Oracle General Ledger, and Oracle Receivables. Their impact and attack vectors are unknown.
An unspecified vulnerability in Oracle Database Server 9.2.0.6 in the Advanced Replication component. The impact and attack vectors are unknown, and the vulnerability is identified as Vuln# DB02.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS