CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Applications Framework product (component: Personalization) affecting versions 12.2.9-12.2.15. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized update, insert, or delete access to some data, unauthorized read access to a subset of data, and partial denial of service. CVSS 3.1 Base Score 4.7 (Confidentiality, Integrity and Availability impacts).
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version affected is 6.2.4. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, resulting in unauthorized read access to a subset of accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).
Vulnerability in PeopleSoft Enterprise SCM Purchasing (component: Purchasing) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Identity Manager Connector (component: Microsoft Active Directory) affecting version 12.2.1.4.0. A difficult to exploit vulnerability allows a low privileged attacker with network access via LDAP to compromise the product, resulting in unauthorized creation, deletion or modification of critical data and unauthorized read access to a subset of data.
A vulnerability in Oracle MySQL Server (Server: DML component) affects versions 8.0.0-8.0.45. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of MySQL Server (complete DoS). CVSS 3.1 Base Score is 4.9 (availability impact).
Vulnerability in Oracle Identity Manager Connector (component: Core) affecting version 12.2.1.4.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Identity Manager Connector (component: Core) affecting version 12.2.1.4.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Business Process Management Suite (component: Human workflow 11g+) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product with human interaction, resulting in unauthorized update, insert or delete access and unauthorized read access to a subset of data, with potential impact on additional products (scope change).
Vulnerability in Oracle Identity Manager (component: Identity Console) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product with human interaction, resulting in unauthorized update, insert or delete access and unauthorized read access to a subset of data, with potential impact on additional products (scope change).
Vulnerability in Oracle Solaris (component: Kernel) affecting version 11.4. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to cause a hang or frequently repeatable crash (complete DoS) of Solaris.
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Human Resources accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).
A vulnerability in Oracle MySQL Server (Server: Optimizer component) affects versions 8.0.0-8.0.45. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of MySQL Server (complete DoS). CVSS 3.1 Base Score is 4.9 (availability impact).
Vulnerability in the PeopleSoft Enterprise PeopleTools product (component: Fluid Core) affecting versions 8.61-8.62. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized update, insert, or delete access to some data, unauthorized read access to a subset of data, and partial denial of service. Due to scope change, attacks may significantly impact additional products. CVSS 3.1 Base Score 6.6.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
Vulnerability in Oracle Configurator (component: User Interface) affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product with human interaction, resulting in unauthorized update, insert or delete access and unauthorized read access to a subset of data, with potential impact on additional products (scope change).
Vulnerability in Oracle GoldenGate (component: Libraries) affecting versions 23.4-23.10. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized read access to a subset of Oracle GoldenGate accessible data.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable vulnerability allows a low privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in a hang or frequently repeatable crash (complete DOS).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.62. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product with human interaction, resulting in unauthorized update, insert or delete access and unauthorized read access to a subset of data, with potential impact on additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS