CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Oracle GoldenGate (versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, 23.4-23.26.1), there is an easily exploitable vulnerability in the Admin Server component. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.
Vulnerability in Oracle GoldenGate (Admin Server Executable). An unauthenticated attacker with network access via HTTPS can read a subset of data.
Vulnerability in Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0) in the ADF Faces component. Difficult to exploit; an unauthenticated attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in Oracle JDeveloper (ADF Faces component) allows a low-privileged attacker with local access to gain unauthorized access to critical data. The attack may affect other products.
Vulnerability in Oracle JDeveloper of Oracle Fusion Middleware (component: Java Business Objects). Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain full access to JDeveloper data and cause a partial denial of service (partial DOS).
Vulnerability in Oracle JDeveloper (ADF Faces). Difficult to exploit, but an unauthenticated attacker via HTTP can gain full access to data.
Vulnerability in Oracle HRMS (France) (component: French HR Payroll) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in Oracle Access Manager (Authentication Engine). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability in Oracle Project Manufacturing (part of Oracle E-Business Suite, component: PJM Command Center) version V16. A high-privileged attacker with local access can access critical data and modify some data.
Vulnerability in Oracle Project Manufacturing (PJM Command Center component) version V16. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to unauthorized creation, deletion, or modification of critical data and access to all Oracle Project Manufacturing data.
Vulnerability in MySQL Server and MySQL Cluster (Server: Group Replication GCS component) in versions MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of MySQL Server and MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (Server: Replication component) in versions MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of MySQL Server and MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) versions 9.7.0-9.7.1. A low-privileged attacker via network can cause a hang or frequent crashes (DOS).
Vulnerability in Oracle Applications Manager component of Oracle E-Business Suite (Oracle Diagnostics Interfaces). Affects versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can exploit it without user interaction. Successful attack allows unauthorized update, insert, or delete access to some data and read access to a subset of data.
Oracle Project Manufacturing (part of Oracle E-Business Suite) version V16 has a vulnerability in the PJM Command Center component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data and gain full access to all data.
Vulnerability in Oracle Data Integrator (component: Patchset Assistant) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can gain unauthorized access to critical data or all Oracle Data Integrator accessible data. Attacks may impact additional products (scope change).
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer). A low-privileged attacker can cause a complete denial of service.
Vulnerability in the Appraisals component of Oracle Performance Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable over network (HTTP) with low privileges. Attacker can unauthorized update, insert or delete data and read a subset of data.
Vulnerability in Oracle Coherence (component: Core). Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Easily exploitable with low privileges and network access via HTTP. Successful attack allows unauthorized read access to a subset of data.
Vulnerability in Oracle Coherence of Oracle Fusion Middleware (component: Core). Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can cause a complete denial of service (complete DOS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS