CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Coherence (component: Core) allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS). The attack is easy to exploit.
Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability in Oracle Coherence (Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can gain unauthorized read and write (update/insert/delete) access to some data.
Vulnerability in Oracle Coherence (component: Core) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is easy, requires network access via HTTP.
Vulnerability in Oracle Coherence (Core). Difficult to exploit, but an unauthenticated attacker via TLS can gain full access to data.
Vulnerability in Oracle Coherence (Core component) allows a high-privileged attacker with local access to gain unauthorized access to critical data. The attack may affect other products.
Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability in Oracle Coherence (Core component). A low-privileged attacker via TCP can cause a hang or frequent crashes (full DOS).
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to unauthorized read and modify data.
Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via TCP can read a subset of data.
Vulnerability in Oracle Coherence (component: Core) version 15.1.1.0.0. A low-privileged attacker with network access via TCP can cause a partial denial of service (partial DOS).
Vulnerability in Oracle Coherence (versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0) in the Core component. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in Oracle Coherence (component: Core) allows an unauthenticated attacker to cause a hang or crash (DOS) and modify data. The attack is difficult, requires network access via HTTP.
Vulnerability in the JSON Duality component of MySQL Server and MySQL Cluster. A high-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
Vulnerability in the JSON Duality component of MySQL Server and MySQL Cluster. A high-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
MySQL Server (versions 8.4.0-8.4.10, 9.7.0-9.7.1) and MySQL Cluster (versions 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1) have a vulnerability in the Server: Replication component. A privileged attacker with local access can cause a hang or frequent crashes (complete DOS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is difficult, requires network access via multiple protocols.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. A high-privileged attacker with difficult exploitation can cause a hang or frequent crashes (DOS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service (hang or frequent crash).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS