CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data and modify some data.
Vulnerability in Oracle Application Object Library (component DB Privileges) affecting versions 12.2.3-12.2.15. An easily exploitable attack by a low-privileged user with logon to the infrastructure allows takeover of Oracle Application Object Library.
Vulnerability in MySQL Server and MySQL Cluster (Server: GIS component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. Difficult to exploit, allows a low-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: RAPID component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: Components Services component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: Group Replication GCS component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (availability impact).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Security: Encryption) affects MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. A high-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (availability impact).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Security: Audit) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in MySQL Server and MySQL Cluster (component: InnoDB) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in Oracle Agile Engineering Data Management (component Install) affecting version 6.2.1. An easily exploitable attack by an unauthenticated attacker with access to the physical communication segment requires user interaction and can lead to unauthorized creation, deletion or modification and access to critical data.
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).
Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit network attack via HTTP by a low-privileged user can lead to unauthorized modification and access to critical data and partial DoS, with potential impact on other products.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: GIS) affects MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in Oracle Applications Manager (component Diagnostics) affecting versions 12.2.3-12.2.15. An easily exploitable network attack via HTTP by a low-privileged user allows takeover of Oracle Applications Manager.
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application can lead to unauthorized access to critical data or complete access to all data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS