CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Bills of Material (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Bills of Material and potentially other products (scope change).
Vulnerability in Oracle General Ledger (component: ADADMIN) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle General Ledger.
Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to access data and impact other products (scope change).
Vulnerability in Oracle Product Hub (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to take over Oracle Product Hub.
Vulnerability in the Assets product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to hang or repeatedly crash the module and to modify and read some data.
Vulnerability in Oracle Engineering (component: Change Management) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Engineering.
Vulnerability in MySQL Router (component: Router: General) of Oracle MySQL, affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to hang or repeatedly crash MySQL Router.
Vulnerability in MySQL Server and MySQL Cluster (component: Client: mysqldump) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component: Security) affecting version 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via TLS to create, delete or modify critical data and gain full access to all accessible data.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) affecting versions 26.7.0-26.7.1. An easily exploitable flaw allows a high-privileged attacker with network access to take over the MySQL server.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows a low-privileged attacker to modify critical data, read a subset of it and cause a hang or repeatable crash (DoS).
Vulnerability in MySQL Router (component: Router: General) affecting version 26.7.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to create, delete or modify critical data and gain full access to all router-accessible data.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication GCS) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to take over the MySQL server.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to modify critical data and cause a hang or repeatable crash (DoS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication Plugin) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the communication segment to cause a hang or repeatable crash (DoS) and modify some data.
Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.
Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.
Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.
Vulnerability in MySQL Cluster (component Cluster: General) affecting versions 26.7.0-26.7.1. A difficult-to-exploit network attack via TCP allows an unauthenticated attacker to cause a hang or repeatable crash (complete DoS) and unauthorized read and modification of some data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS