CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the ImageIO component of Oracle Java SE, JavaFX and GraalVM. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS).
Vulnerability in the CORBA component of Oracle Java SE and GraalVM Enterprise Edition. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS).
Vulnerability in the 2D component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to cause a hang or frequently repeatable crash (DoS) and to gain unauthorized read and update access to some accessible data. It can be exploited via APIs in the component, e.g., through a web service supplying data to the APIs, and also affects deployments running untrusted code in the Java sandbox.
Vulnerability in the Server Infrastructure component of Siebel CRM Deployment. A difficult-to-exploit attack requires user interaction and can lead to unauthorized access to critical data.
Vulnerability in the Integration - Scripting component of Siebel CRM Development. A high-privileged attacker with network access via CORBA can cause a hang or repeatable crash (complete DoS) and unauthorized data modification and read access.
Vulnerability in the Open UI component of Siebel CRM End User. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical or all data.
Vulnerability in the JGSS component of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. A difficult-to-exploit attack can cause a hang or repeatable crash (complete DoS) and unauthorized data modification.
Vulnerability in the Libraries component of Oracle Java SE. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS).
Vulnerability in Oracle Java SE (component: Networking) version 27. A difficult to exploit flaw allows an unauthenticated network attacker to cause partial denial of service; exploitable via component APIs, e.g., a web service, and applies to sandboxed Java clients.
Vulnerability in Oracle Identity Manager (End User Self Service component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via T3 or IIOP can take over Oracle Identity Manager. CVSS 9.8.
Vulnerability in Oracle Identity Manager (component: REST WebServices) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can take over Oracle Identity Manager.
Vulnerability in Oracle Outside In Technology (component Outside In PDF Export SDK) version 8.5.8. A difficult-to-exploit attack via HTTP network access requires user interaction and can lead to takeover of the product.
Vulnerability in Oracle Outside In Technology (component Outside In PDF Export SDK) version 8.5.8. A difficult-to-exploit attack via HTTP network access requires user interaction and can lead to takeover of the product.
Vulnerability in the Outside In PDF Export SDK component of Oracle Outside In Technology. An attacker with logon to the infrastructure can gain unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE, Oracle JavaFX and Oracle GraalVM Enterprise Edition (component: JavaFX). A difficult to exploit flaw allows an unauthenticated network attacker to read a subset of data, requiring user interaction; applies to sandboxed Java clients.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: Sound). A difficult to exploit flaw allows an unauthenticated network attacker to cause partial denial of service, requiring user interaction; applies to sandboxed Java clients.
Vulnerability in the Web Access component of Primavera P6 Enterprise Project Portfolio Management. A low-privileged attacker with network access via HTTP can perform unauthorized update, insert or delete of some data.
Vulnerability in the Networking component of Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. A difficult-to-exploit attack via SOCKS5 can lead to unauthorized creation, deletion or modification of critical data, with possible impact on additional products.
Vulnerability in the Serviceability component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. It is difficult to exploit, requires logon to the infrastructure and human interaction, and can lead to unauthorized update, insert or delete access to data and partial denial of service.
Vulnerability in the Utility component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can exploit it to cause unauthorized data modification and partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS