CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by unauthenticated attacker with local access. Successful attack can cause complete DoS and unauthorized read access to data.
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw requires login and user interaction; a low-privileged attacker can gain unauthorized access to data and cause partial denial of service.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to system data.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows an unauthenticated attacker over HTTP to gain unauthorized read access to a subset of system data.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to data and modify it.
Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows a low-privileged attacker with physical access to the communication segment to gain unauthorized modification and read access to a subset of data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. A low-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. An unauthenticated attacker with local access and user interaction can modify, insert, or delete some data and cause partial denial of service.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. A low-privileged attacker with local access can gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker via HTTP with user interaction can modify, insert, or delete some data and read a subset of data. Attacks may impact additional products (scope change).
Vulnerability in Helidon (component: Imperative Web Server) version 3.2.18. An unauthenticated attacker via HTTP can gain unauthorized access to critical data or all accessible data. Attacks may impact additional products (scope change).
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker via HTTP with user interaction can modify, insert, or delete some data and read a subset of data. Attacks may impact additional products (scope change).
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Internal operations) version 11.4.0. An unauthenticated attacker via HTTP with user interaction can modify, insert, or delete some data and read a subset of data. Attacks may impact additional products (scope change).
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker via HTTP can gain unauthorized access to critical data or all accessible data and cause partial denial of service.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can create, delete, or modify critical data and gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) version 11.4.0. An unauthenticated attacker can exploit it via HTTP, but requires user interaction. The attack may impact other products (scope change) and result in unauthorized update, insert, delete, and read access to some data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) version 11.4.0. A high-privileged attacker can exploit it via HTTP, potentially impacting other products (scope change). Successful attack leads to unauthorized access to critical data or complete access to all data.