CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment can access and modify critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause hang or repeatable crashes (complete DoS), modify data, and read a subset.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with network access via JDENET can cause a hang or repeatable crash (complete DoS) and gain unauthorized read and update access to some data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. An easily exploitable flaw allows a high-privileged attacker with access to the physical communication segment to compromise Oracle VM VirtualBox.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Package Build SEC component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon access to the infrastructure can take over the application.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access, requiring user interaction, can take over the application.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with network access via SMTP can modify some data and cause a partial denial of service.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise JD Edwards EnterpriseOne Tools.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Interoperability SEC) affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via TLS to gain unauthorized creation, deletion, or modification access to critical data and access to it.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Interoperability SEC) affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools.
Vulnerability in Oracle VM VirtualBox (Core component) affecting version 7.2.16. A low-privileged attacker with logon access can cause a hang or repeatable crash (complete DoS), potentially impacting other products (scope change).
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Database and Comm SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to take over the system.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Package Build SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to create, delete or modify data and to cause a hang or repeatable crash of the system.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with local logon to the infrastructure to create, delete or modify data and gain full access to system data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS