CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability requires logon to the infrastructure and allows a low privileged attacker to gain unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data.
Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit attack by a low-privileged user with logon to the infrastructure allows takeover of the system.
Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized update, insert or delete access to some data.
Vulnerability in Oracle Java SE (component: Compiler) affects version 26.0.2. A difficult-to-exploit attack by an unauthenticated attacker with network access via multiple protocols can cause a hang or frequently repeatable crash (complete DoS). The vulnerability can only be exploited by supplying data to APIs in the specified component without using untrusted Java Web Start applications or untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (availability impact).
Vulnerability in Primavera Unifier (component Core) affecting versions 21.12.0-21.12.17. A difficult-to-exploit network attack via HTTP by an unauthenticated attacker can lead to unauthorized creation, deletion or modification and access to critical data.
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Affected versions are 23.12.0-23.12.16. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and read a subset of accessible data.
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 4.3 (confidentiality impact).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Replication component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Pluggable Auth component. An authenticated low-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Replication component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (C API component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (Availability impacts).
Vulnerability in MySQL Server and MySQL Cluster (C API component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (Availability impacts).
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (Availability impacts).
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) affecting version 3.6. A low privileged attacker with logon to the infrastructure where the component executes can, with human interaction, take over Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).
Vulnerability in MySQL Server and MySQL Cluster (Server: Connection Handling component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).
Vulnerability in MySQL Server and MySQL Cluster (Server: Components Services component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (Availability impacts).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS