CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An easily exploitable vulnerability exists in Oracle Fusion Middleware (Dynamic Monitoring Service component) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the system, requiring user interaction; the attack may impact additional products (scope change).
A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (User Interface component) in versions 8.0.7.9, 8.0.8.7, and 8.1.2.5 allows a low-privileged local attacker, with user interaction, to gain unauthorized access to data, modify it, and cause a hang or repeatable crash (DoS).
A vulnerability in Oracle Life Sciences InForm (App Server component) versions 7.0.1.0 and 7.0.1.1 allows an unauthenticated attacker with network access via HTTP to partially update, insert, or delete data and to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 6.5 (confidentiality and integrity impacts).
Vulnerability in Oracle Life Sciences InForm (component: IDM Authentication) affecting versions 7.0.1.0 and 7.0.1.1. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product with human interaction, resulting in unauthorized update, insert or delete access, unauthorized read access, and partial denial of service.
A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (User Interface component) versions 8.0.7.9, 8.0.8.7, and 8.1.2.5 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data. The attack requires human interaction from a person other than the attacker. CVSS 3.1 Base Score 4.8 (confidentiality impact).
An easily exploitable vulnerability exists in Oracle MySQL Shell (Shell: Core Client component) in versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. A low-privileged attacker with logon to the infrastructure where MySQL Shell executes can cause a hang or frequently repeatable crash (complete DoS), requiring user interaction.
Vulnerability in MySQL Shell (component: Shell: Core Client) affecting versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A difficult-to-exploit flaw allows a high-privileged attacker with network access to gain unauthorized access to critical data or all MySQL Shell accessible data, with possible impact on additional products (scope change).
An easily exploitable vulnerability exists in Oracle MySQL Shell (Shell: Core Client component) in versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. A low-privileged attacker with logon to the infrastructure where MySQL Shell executes can cause a hang or frequently repeatable crash (complete DoS), requiring user interaction.
Vulnerability in Oracle WebLogic Server (component: Web Services) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction from a person other than the attacker is required. Successful attacks can result in unauthorized creation, deletion, or modification of critical data.
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product (component: Platform) affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized creation, deletion, or modification access to critical data and unauthorized access to critical data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
Vulnerability in the Workflow component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.62). A low-privileged authenticated attacker over HTTP, with user interaction, can perform unauthorized update, insert or delete access and read a subset of data, with potential impact on additional products.
Vulnerability in PeopleSoft Enterprise FIN Project Costing (component: Projects) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data.
A vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of MySQL Server (complete DoS). CVSS 3.1 Base Score is 4.9 (availability impact).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
Vulnerability in Oracle Workflow (Workflow Loader component) of Oracle E-Business Suite affects versions 12.2.3-12.2.15. A high-privileged attacker with HTTP network access can easily exploit it to gain unauthorized update, insert or delete access to some data and cause a partial denial of service.
Vulnerability in PeopleSoft Enterprise FIN Maintenance Management (component: Work Order Management) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle PeopleSoft Enterprise FIN Contracts (component: Contracts) affecting version 9.2. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in PeopleSoft Enterprise FIN Maintenance Management (component: Work Order Management) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS