CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: JSSE). A difficult to exploit flaw allows an unauthenticated network attacker via TLS to perform unauthorized update, insert or delete of data; exploitable via component APIs, e.g., through a web service.
Vulnerability in Oracle Outside In Technology (Outside In Image Export SDK component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Oracle Outside In Technology (Outside In Image Export SDK component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Oracle Outside In Technology (Outside In Core component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Oracle Outside In Technology (Outside In Image Export SDK component) version 8.5.8. An authenticated attacker with local access and user interaction can take over the product. CVSS 7.8.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - UNIX) versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via HTTP can, with user interaction, perform unauthorized updates, inserts, or deletes and gain unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component Lightweight HTTP Server). An unauthenticated attacker with network access can perform unauthorized updates, inserts, or deletes. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component Networking). An unauthenticated attacker with network access can perform unauthorized updates, inserts, or deletes. Exploitable only by supplying data to APIs in the component, e.g., via a web service.
Vulnerability in Oracle Java SE (component: Networking). An unauthenticated attacker with network access can exploit it by supplying data to APIs in the component, resulting in unauthorized update, insert or delete access to some Oracle Java SE accessible data.
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
Vulnerability in Siebel CRM Deployment (Server Infrastructure component) versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP may allow unauthorized creation, deletion or modification of data and access to it. CVSS 7.4.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.
Vulnerability in Oracle Siebel CRM End User (component: Communications Panel/Dashboard) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert or delete access to some data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all Siebel CRM Deployment accessible data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A low-privileged attacker with network access via HTTP can take over Siebel CRM Deployment.
Vulnerability in Oracle Siebel Apps - Customer Order Management (component: Order Management). A low-privileged attacker with network access via HTTP, requiring user interaction, can cause unauthorized update, insert or delete access, unauthorized read access to a subset of data, and partial denial of service.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert or delete access and unauthorized read access to a subset of data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS