CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Connectors (Connector/J component) versions 9.7.0-9.7.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Connectors. Human interaction from a person other than the attacker is required.
Vulnerability in the Configuration Management component of JD Edwards EnterpriseOne Configurator (Oracle JD Edwards). A low-privileged attacker via HTTP can cause a complete DoS (hang or frequent crashes) and gain unauthorized data access.
Vulnerability in PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data.
Vulnerability in PeopleSoft Enterprise CS Campus Community product. An unauthenticated attacker with network access via HTTP can gain complete access to all data and unauthorized update, insert, or delete access to some data.
Vulnerability in PeopleSoft Enterprise CS Student Records Research Tracking component. A high-privileged attacker via HTTP can take over the system.
Vulnerability in PeopleSoft Enterprise CS Financial Aid of Oracle PeopleSoft (component: Commonline Loans). Affects version 9.2.38. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to read a subset of data. CVSS 5.3 (Confidentiality impact).
Vulnerability in Oracle PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to access critical data or all data. CVSS 5.9 (Confidentiality impact).
Vulnerability in PeopleSoft Enterprise CS Campus Community Communication component. A low-privileged attacker via HTTPS can access critical data.
Vulnerability in PeopleSoft Enterprise CS Financial Aid (version 9.2.38). Easily exploitable, requires login and low privileges. Attacker can unauthorized create, delete or modify critical data and read a subset of data.
A vulnerability in PeopleSoft Enterprise CS Financial Aid allows a low-privileged attacker with local access to gain complete access to all financial aid data.
Vulnerability in PeopleSoft Enterprise FIN Common Objects (part of Oracle PeopleSoft, component: Security) version 9.2. A low-privileged attacker with local access, after user interaction, can modify critical data.
A vulnerability in PeopleSoft Enterprise FIN Pay/Bill Management allows a low-privileged attacker with local access to gain complete access to all payment and bill management data.
Vulnerability in Oracle Enterprise Asset Management (component: Work Definition Issues) versions 12.2.3-12.2.15. A low-privileged attacker via HTTPS can gain unauthorized read and modify access to data.
Vulnerability in Oracle Project Foundation product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability in MySQL Server and MySQL Cluster Replication component. A high-privileged attacker via multiple protocols can take over the system.
Vulnerability in Oracle Workflow (component: Workflow Notification Mailer) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, write, and delete access to data and cause a partial denial of service.
Vulnerability in Oracle Content Manager (component: Cover Letter) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, write, and delete access to data and cause a partial denial of service.
Vulnerability in Oracle Partner Management (component: Partner Dashboard) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTPS can gain unauthorized read, write, and delete access to data and cause a partial denial of service.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: Web Service Provider) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, write, and delete access to data and cause a partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS