CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Agile Engineering Data Management (component: Core) version 6.2.1. A low privileged attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DOS) of the system.
Vulnerability in Oracle Agile Engineering Data Management (component: Core) version 6.2.1. A low privileged attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DOS) of the system.
Oracle Agile Engineering Data Management version 6.2.1 has a vulnerability in the Install component. The vulnerability is difficult to exploit but allows a low-privileged attacker with network access via HTTP to cause a hang or frequent crashes (full DoS) of the system.
Vulnerability in Oracle Agile Engineering Data Management (component: Document Management) version 6.2.1. A low privileged attacker with local access to the infrastructure can perform unauthorized update, insert, or delete operations on some data and cause a partial denial of service (partial DOS).
Vulnerability in Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install) version 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise the system. Requires human interaction. Successful attack can lead to unauthorized creation, deletion, or modification of critical data and access to it.
Vulnerability in Oracle Agile Engineering Data Management (Install component) version 6.2.1. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all Oracle Agile Engineering Data Management data. The attack may impact other products.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Data Import) version 6.2.4. Allows a high-privileged attacker with local access to take over the system.
Vulnerability in Oracle Product Lifecycle Analytics (component: Installation Issues) version 3.6.1. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data, modify or delete it, and cause a partial denial of service (partial DOS).
Vulnerability in Oracle Agile PLM (Security component) version 9.3.6. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all Oracle Agile PLM data. The attack may impact other products.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Experience Manager component) version 11.4.0. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker with local access can cause a complete denial of service (DOS).
Vulnerability in Oracle MySQL's MySQL Server and MySQL Cluster (component: Server: Optimizer). Affected versions are MySQL Server 9.7.0-9.7.1 and MySQL Cluster 9.7.0-9.7.1. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the server.
Vulnerability in Oracle Communications Convergent Charging Controller (part of Oracle Communications) versions 15.0.0.0.0 and 15.2.0.0.0. A high-privileged attacker with network access via HTTP, with user interaction, can take over the system.
Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. Difficult to exploit flaw allows a low-privileged attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and access all platform data.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) allows a high-privileged attacker to cause a hang or frequent crash (DOS) over the network. Network access and multiple protocols are required.
Vulnerability in Oracle HRMS (US) (Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, a low-privileged attacker via HTTP can gain unauthorized read access and cause partial denial of service.
Vulnerability in Oracle HRMS (UK) of Oracle E-Business Suite (component: Internal Operations) versions 12.2.8-12.2.15. Difficult to exploit flaw allows a low-privileged attacker with network access via HTTP to unauthorizedly access critical data, potentially affecting other products.
Vulnerability in Oracle Order Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Order Management data.
Vulnerability in Oracle Application Object Library (Core component) versions 12.2.3-12.2.15. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all Oracle Application Object Library data. The attack may impact other products.
Vulnerability in the JSON component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS) of the server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS