CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Server and MySQL Cluster (Server: DDL component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with logon to the infrastructure to cause a hang or frequently repeatable crash (complete DoS) of the server, requiring user interaction. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server, though the attack is difficult to exploit. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit network attack requiring high privileges can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle Utilities Network Management System (System Wide component) affects versions 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and 25.12.0.0.0-25.12.0.0.2. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized read access to a subset of data.
Vulnerability in Oracle Communications Unified Inventory Management (component: Security) affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all accessible data in the application.
Vulnerability in Oracle Communications Unified Inventory Management (component: Security) affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. A low-privileged attacker with network access via HTTP can exploit this vulnerability, leading to takeover of the application.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affects version 6.2.4. A low-privileged attacker with network access via HTTP can exploit this vulnerability, which requires user interaction, leading to takeover of the application.
Vulnerability in Oracle GoldenGate (Vendor Access Module component) affects versions 21.3-21.23. An easily exploitable local attack by a low-privileged user with logon to the infrastructure can result in unauthorized access to critical data or complete access to all GoldenGate data.
Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB) affecting versions 26.1-26.1.1.3.0. A difficult to exploit vulnerability requires logon to the infrastructure and allows a low privileged attacker to gain unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. A low-privileged attacker with logon to the infrastructure where VirtualBox executes can exploit this vulnerability, which requires user interaction, leading to takeover of VirtualBox and potentially impacting other products.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. A low-privileged attacker with logon to the infrastructure where VirtualBox executes can easily exploit this vulnerability, leading to takeover of VirtualBox.
Vulnerability in Oracle ZFS Storage Appliance Kit (Core component) affects version 8.8. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized read access to a subset of data.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affects version 6.2.4. A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the application.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Supply Chain Relationship Mgmt component) affects version 6.2.4. An easily exploitable network attack by a low-privileged user requires human interaction and can result in unauthorized update, insert or delete access to some data and read access to a subset of data, with possible impact on additional products (scope change).
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component Product Quality Management) version 6.2.4. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to takeover of the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS