CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Server and MySQL Cluster (C API component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (Availability impacts).
Vulnerability in MySQL Server and MySQL Cluster (C API component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (Availability impacts).
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (Availability impacts).
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) affecting version 3.6. A low privileged attacker with logon to the infrastructure where the component executes can, with human interaction, take over Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).
Vulnerability in MySQL Server and MySQL Cluster (Server: Connection Handling component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).
Vulnerability in MySQL Server and MySQL Cluster (Server: Components Services component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (Availability impacts).
Vulnerability in MySQL Server and MySQL Cluster (Server: Connection Handling component) affecting MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data. CVSS 3.1 Base Score 5.3 (Integrity impacts).
Vulnerability in Oracle Agile PLM (Application Server component) affecting version 9.3.6. An unauthenticated attacker with network access via TLS can gain unauthorized access to critical data or all data and perform unauthorized update, insert or delete access to some data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Agile PLM (Security component) affecting version 9.3.6. A low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes can gain unauthorized access to critical data or all data and perform unauthorized update, insert or delete access to some data; attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Agile PLM (Web Client component) affecting version 9.3.6. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).
Vulnerability in Oracle Agile PLM (Application Server component) version 9.3.6. A difficult-to-exploit attack via HTTP by an unauthenticated attacker can lead to unauthorized access to critical data and modification.
Vulnerability in Oracle Agile PLM (Web Client component) version 9.3.6. An easily exploitable attack via HTTP by an unauthenticated attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.
Vulnerability in Oracle Agile PLM (Application Server component) version 9.3.6. An easily exploitable attack via HTTP by a low-privileged attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.
Vulnerability in Oracle Payroll (Payroll component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a high-privileged attacker can lead to takeover of Oracle Payroll.
Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a low-privileged attacker can lead to unauthorized creation, deletion, or modification of critical data and access to it.
Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.
Vulnerability in Oracle One-to-One Fulfillment (Documents component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker can lead to unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Concurrent Processing (Request Submission and Scheduling component) versions 12.2.3-12.2.15. An easily exploitable attack by a high-privileged attacker with local logon may impact additional products (scope change) and lead to unauthorized access to critical data.
Vulnerability in Oracle One-to-One Fulfillment (Admin Console UI component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by an unauthenticated attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.
Vulnerability in Oracle Application Object Library (Core component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by an unauthenticated attacker requires user interaction and can lead to unauthorized creation, deletion, or modification of critical data and access to it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS