CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires local access and low privileges. Successful attack can cause a hang or frequent crashes (complete DoS).
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker over network (HTTP). Successful attack can allow unauthorized modification, read access, and partial denial of service.
Vulnerability in the RDBMS component of Oracle Database Server, affecting versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. Easily exploitable by unauthenticated attacker over network (Oracle Net). Successful attack can allow unauthorized read access to a subset of data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (SQL). Successful attack can allow unauthorized creation, deletion, modification of data and full access to data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker over network (HTTP). Successful attack can cause complete DoS, as well as unauthorized modification and read access to data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Difficult to exploit, requires low privileges, network access (HTTP) and user interaction. Successful attack can allow full access to data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Easily exploitable by unauthenticated attacker over network (HTTP). Successful attack can allow unauthorized read access to a subset of data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (HTTP). Successful attack can allow full access to data.
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by unauthenticated attacker with local access. Successful attack can cause complete DoS and unauthorized read access to data.
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw requires login and user interaction; a low-privileged attacker can gain unauthorized access to data and cause partial denial of service.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to system data.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows an unauthenticated attacker over HTTP to gain unauthorized read access to a subset of system data.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to data and modify it.
Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows a low-privileged attacker with physical access to the communication segment to gain unauthorized modification and read access to a subset of data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. A low-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. An unauthenticated attacker with local access and user interaction can modify, insert, or delete some data and cause partial denial of service.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. A low-privileged attacker with local access can gain unauthorized access to critical data or all accessible data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

