CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle SDP Number Portability product of Oracle E-Business Suite (component: Installation). Affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access and cause partial denial of service.
Vulnerability in MySQL Cluster (Cluster: NDB Operator component) versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. An unauthenticated attacker with local access can exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all MySQL Cluster data.
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring user interaction. Successful attack can result in unauthorized access to critical data or complete access to all WebCenter Sites data. CVSS 6.5 (Confidentiality).
Vulnerability in Oracle Java SE (component: Installation) in versions 8u491 and 8u491-perf. A low-privileged attacker with local access, after user interaction, can take over the Java SE environment.
Vulnerability in Oracle Advanced Pricing (component: Price List) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can gain unauthorized read, write, and delete access to data.
Vulnerability in Service Delivery Platform (Messaging Enabler component) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized update, insert, or delete of data and read access to a subset of data. The attack may impact other products.
Vulnerability in Oracle Advanced Inbound Telephony (component: SDK client integration) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, write, and delete access to data and cause a partial denial of service.
Vulnerability in Oracle Transportation Management (version 6.5.3) in the Authentication component. A low-privileged attacker via HTTP can gain unauthorized read access to data.
Vulnerability in Oracle Transportation Management (part of Oracle Supply Chain) version 6.5.3. Allows an authenticated attacker with high privileges and network access via HTTP to unauthorizedly create, delete, or modify critical data and access it.
Vulnerability in Oracle TimesTen In-Memory Database (ttcserver component) version 26.1.1.1.0. An unauthenticated attacker with access to the physical communication segment can cause a hang or frequent crash (complete DOS) of the database.
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. Easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to cause a partial denial of service (partial DOS).
TimesTen In-Memory Database version 26.1.1.1.0 has a vulnerability in the Kubernetes Operator component. A privileged attacker with local access can unauthorizedly update, insert, or delete data, read a subset of data, and cause a partial denial of service (partial DOS), also affecting other products.
Vulnerability in TimesTen In-Memory Database (version 26.1.1.1.0) in the Kubernetes Operator component. A low-privileged attacker via HTTPS can gain unauthorized read access to data.
Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. It is difficult to exploit, requires local access and low privileges. Successful attack can lead to unauthorized access to critical data or full access to all database data.
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. A high-privileged attacker with local access can take over the database.
Vulnerability in TimesTen In-Memory Database (Kubernetes Operator component). A low-privileged attacker via HTTPS can cause a hang or frequent crashes (full DOS).
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator). Affects version 26.1.1.1.0. A low-privileged attacker with network access via HTTPS can cause a complete denial of service (complete DOS) by hanging or frequent crashes.
A vulnerability in TimesTen In-Memory Database's Kubernetes Operator allows a low-privileged attacker with local access to gain complete access to all database data, with impact on other products.
Vulnerability in Oracle GoldenGate (component: Receiver Service Executable). Affects versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. A low-privileged attacker with network access via HTTP can cause a complete denial of service (complete DOS).
Vulnerability in Oracle GoldenGate (Admin Server Executable) versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. Easily exploitable by an unauthenticated attacker with access to the physical communication segment. Successful attack may cause partial denial of service. CVSS 4.3 (Availability impacts).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS