CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Interoperability SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to gain unauthorized access to critical data and cause a partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Interoperability SEC) affecting versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a low-privileged attacker with network access via JDENET to create, delete or modify data and gain full access to system data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to take over the system.
Vulnerability in Oracle Outside In Technology (component Outside In Core) affecting version 8.5.8. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data, and attacks may impact additional products (scope change).
Vulnerability in Oracle VM VirtualBox (Core component) affecting version 7.2.16. A low-privileged attacker with logon access, requiring user interaction, can cause a hang or repeatable crash (complete DoS), potentially impacting other products (scope change).
Vulnerability in Oracle WebLogic Server (Core component) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can create, delete, or modify critical data and gain full access to it.
Vulnerability in Oracle VM VirtualBox (component Core) affecting version 7.2.16. An easily exploitable flaw allows a low-privileged attacker with local logon to gain unauthorized access to critical data and cause a hang or repeatable crash, and attacks may impact additional products (scope change).
Vulnerability in Oracle Weblogic Server Proxy Plug-in (component WebLogic Server Proxy Plug-In for Third-Party Web Servers) affecting versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to create, delete or modify data and access critical data, and attacks may impact additional products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can modify and read some data, potentially impacting other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in the product.
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
Vulnerability in Oracle Access Manager (component Authentication Engine) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data.
Vulnerability in Oracle HRMS (India) (Indian Payroll component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with local logon can gain unauthorized access to critical data or all data accessible in the product, and attacks may impact additional products (scope change).
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (Security component) in the listed versions. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE (RMI component) affecting versions 8u503 and 8u503-perf, and Oracle GraalVM Enterprise Edition 21.3.19.1.1. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data; attacks may impact additional products (scope change).
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component Networking). Affects multiple listed versions, including Java SE 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27. A difficult-to-exploit flaw allows an unauthenticated network attacker to cause unauthorized data modification.
Vulnerability in Oracle Java SE (Networking component) affecting versions 21.0.12.1, 25.0.4.1 and 27. An unauthenticated attacker with network access can gain unauthorized read access to a subset of data accessible in the product.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (JAXP component) in the listed versions. A difficult-to-exploit unauthenticated network attack can lead to unauthorized access to critical data or all data accessible in the product.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Server component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over the system.
Vulnerability in Oracle Java SE (component Compiler). Affects versions 25.0.4.1 and 27. A difficult-to-exploit flaw allows an unauthenticated network attacker to gain unauthorized read access to a subset of Java SE accessible data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS