CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via SAML can take over Oracle Access Manager.
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key. Each stanza is 98 bytes of attacker-chosen header, and the file is rejected only after every attempt has run.
Vulnerability in PeopleSoft Enterprise PeopleTools (Multichannel Framework component) affecting versions 8.61-8.63. A high-privileged attacker with network access via HTTP can take over the product.
Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to create, delete or modify critical data and gain full access to Oracle Access Manager data.
Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with SAML network access to take over Oracle Access Manager.
Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data, modify it and cause a partial denial of service.
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
Vulnerability in MySQL Connectors (Connector/Python component) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized access to critical data or full access to all data accessible through MySQL Connectors.
Vulnerability in Oracle Identity Manager (OIM Legacy UI component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (OIM Legacy UI component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows a low-privileged attacker with HTTPS network access to take over Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (OIM Legacy UI component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can, with user interaction, perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data; attacks may impact additional products (scope change).
Vulnerability in the JAXP component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS). The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability in Oracle WebLogic Server (Core component) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via T3 or IIOP can take over Oracle WebLogic Server.
Vulnerability in Oracle Data Integrator (Data Transforms component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data, modify it and gain full access to Oracle Data Integrator data.
Vulnerability in Oracle Data Integrator (component Console / Repository Explorer) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily compromise the product and take it over. CVSS 3.1 Base Score is 9.8 with confidentiality, integrity and availability impacts.
Vulnerability in Oracle Data Integrator (component Console / Repository Explorer) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via RMI can easily compromise the product and take it over. CVSS 3.1 Base Score is 9.8 with confidentiality, integrity and availability impacts.
Vulnerability in the Networking component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can perform unauthorized data modification and cause a partial denial of service. The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability in the Internal Operations component of Oracle Demand Planning (Oracle Supply Chain) in versions 12.1 and 12.2. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data, requiring user interaction and potentially impacting additional products.
Vulnerability in Oracle Product Hub (Internal Operations component) affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over Oracle Product Hub, with impact potentially extending beyond this product.
Vulnerability in Oracle Applications Manager within Oracle E-Business Suite (component Diagnostics). Affects versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to gain unauthorized read access to a subset of data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS