CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability via vectors through Web Services.
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.
Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality, integrity, and availability via unknown vectors.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices.
Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXWS Web Services Stack.
Apache Commons FileUpload before version 1.3.3 has a vulnerability that allows remote code execution through DiskFileItem file manipulation.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
The graphics component in various versions of Windows and Office applications allows attackers to execute arbitrary code via a crafted True Type font. This is a privilege escalation vulnerability.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.