CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. A high-privileged attacker with network access via HTTP can exploit it, potentially impacting other products (scope change). Impact includes unauthorized update, insert, delete, and read access to some data.
Vulnerability in JD Edwards EnterpriseOne Tools (Web Runtime SEC component) versions 9.2.0.0-9.2.9.4. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Affected versions are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts).
Vulnerability in Oracle Applications Manager (Oracle E-Business Suite, Application Logging Interfaces component) versions 12.2.3-12.2.14. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).
A vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (Security component) affects Java SE 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25, GraalVM for JDK 17.0.16 and 21.0.8, and GraalVM Enterprise Edition 21.3.15. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access to compromise data integrity.
Vulnerability in JD Edwards EnterpriseOne Tools (Object and Environment Tech component) versions 9.2.0.0-9.2.9.4. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: PIA Core Technology) affecting versions 8.60, 8.61, and 8.62. An unauthenticated attacker with network access via HTTP can exploit it, but user interaction is required. The vulnerability may impact other products (scope change). Impact includes unauthorized update, insert, delete, and read access to some data.
A vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged authenticated attacker with network access can cause a hang or repeatable crash (complete DoS) and perform unauthorized data modifications.
A vulnerability in Oracle MySQL Server (Server: DML component) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged authenticated attacker with network access can cause a hang or repeatable crash (complete DoS) and perform unauthorized data modifications.
Vulnerability in Oracle Workflow (Oracle E-Business Suite, Workflow Notification Mailer component) versions 12.2.3-12.2.14. Easily exploitable, allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Requires user interaction, and attacks may impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS 6.1 (Confidentiality and Integrity).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Rich Text Editor) in versions 8.60, 8.61, and 8.62. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to data (read and modify).
A vulnerability in the Portable Clusterware component of Oracle Database Server allows an unauthenticated attacker with network access via Bonjour to compromise Portable Clusterware. Successful attacks can result in unauthorized read access to a subset of data. Affects versions 19.3-19.28, 21.3-21.19, 23.4-23.9.
Vulnerability in Oracle ZFS Storage Appliance Kit (Analytics component) version 8.8. A high-privileged attacker with network access via HTTP can remotely cause a hang or frequently repeatable crash (complete DOS) of the appliance. CVSS 3.1 Base Score 4.9 (Availability impacts).
Vulnerability in Oracle MySQL Server (component: InnoDB). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle MySQL Server (component: InnoDB). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).
A vulnerability in MySQL Server (component: Server: Optimizer) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged attacker with network access can cause a hang or frequent crashes (complete DoS) of MySQL Server. CVSS 4.9.
Vulnerability in Oracle iStore (component: Shopping Cart) of Oracle E-Business Suite, affecting versions 12.2.5-12.2.14. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required. Successful attacks can lead to unauthorized update, insert, or delete access to some Oracle iStore data and unauthorized read access to a subset of data.
Vulnerability in Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data.
A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (part of Oracle Financial Services Applications) in the Platform component. Affects versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. An unauthenticated attacker can access via HTTP, requiring user interaction, and gain unauthorized read and modify access to some data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS