CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Server and MySQL Cluster (component Server: Security: Privileges) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Difficult to exploit, it allows a low-privileged attacker with network access to create, delete or modify critical data and gain full access to all accessible data.
Vulnerability in MySQL Server and MySQL Cluster (component Server: Group Replication GCS) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by an unauthenticated attacker with access to the physical communication segment, allowing a hang or frequently repeatable crash (complete DoS) of the server.
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
Vulnerability in MySQL Server and MySQL Cluster (component: Client: mysqldump) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with logon to the infrastructure, allowing takeover of the database server.
Vulnerability in MySQL Server and MySQL Cluster (component Server: XML) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component Core) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable by a low-privileged attacker with logon to the infrastructure, allowing unauthorized access to critical data or complete access to all accessible data.
Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component Security) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit, it allows an unauthenticated attacker with access to the physical communication segment to create, delete or modify critical data and read a subset of accessible data.
Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component: Security) affecting version 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via TLS to create, delete or modify critical data and gain full access to all accessible data.
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product (component: Security) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of Elastic Charging Engine accessible data.
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A difficult-to-exploit network attack can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) affecting versions 26.7.0-26.7.1. An easily exploitable flaw allows a high-privileged attacker with network access to take over the MySQL server.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows a low-privileged attacker to modify critical data, read a subset of it and cause a hang or repeatable crash (DoS).
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Router (component: Router: General) affecting version 26.7.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to create, delete or modify critical data and gain full access to all router-accessible data.
Vulnerability in Oracle Applications Manager of Oracle E-Business Suite (component Oracle Diagnostics Interfaces) affects versions 12.2.3-12.2.15. An easily exploitable HTTP attack by a low-privileged user can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication GCS) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to take over the MySQL server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS