CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Project Contracts, and attacks may significantly impact additional products (scope change), resulting in unauthorized access to critical data.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Application Server, resulting in unauthorized creation, deletion, or modification access to critical data as well as unauthorized access to critical data.
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture, resulting in unauthorized creation, deletion, or modification access to critical data, unauthorized access to critical data, and partial denial of service.
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture, potentially leading to takeover.
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture, potentially leading to takeover.
Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments) affects versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Document Management and Collaboration, requiring human interaction, and may significantly impact additional products (scope change), resulting in unauthorized creation, deletion, or modification access to critical data as well as unauthorized access to critical data.
Vulnerability in Oracle Bills of Material (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Bills of Material.
Vulnerability in Oracle Bills of Material (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Bills of Material and potentially other products (scope change).
Vulnerability in Oracle General Ledger (component: ADADMIN) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle General Ledger.
Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to access data and impact other products (scope change).
Vulnerability in Oracle Product Hub (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to take over Oracle Product Hub.
Vulnerability in the Assets product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to hang or repeatedly crash the module and to modify and read some data.
Vulnerability in Oracle Engineering (component: Change Management) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Engineering.
Vulnerability in MySQL Router (component: Router: General) of Oracle MySQL, affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to hang or repeatedly crash MySQL Router.
Vulnerability in MySQL Server and MySQL Cluster (component: Client: mysqldump) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component: Security) affecting version 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via TLS to create, delete or modify critical data and gain full access to all accessible data.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) affecting versions 26.7.0-26.7.1. An easily exploitable flaw allows a high-privileged attacker with network access to take over the MySQL server.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows a low-privileged attacker to modify critical data, read a subset of it and cause a hang or repeatable crash (DoS).
Vulnerability in MySQL Router (component: Router: General) affecting version 26.7.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to create, delete or modify critical data and gain full access to all router-accessible data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS